Setting up Microsoft PIN Reset Service - AADSTS500113: No reply address is registered for the application.

Question

Setting up Microsoft PIN Reset Service - AADSTS500113: No reply address is registered for the application.

Ronald 10

Hi All

I am trying to follow this article on resetting Pin

https://learn.microsoft.com/en-us/windows/security/identity-protection/hello-for-business/pin-reset?tabs=intune#how-nondestructive-pin-reset-works

When trying to log into the Microsoft Reset Pin Production Portal I get this message

What do I need to do in Azure as I cant find any instructions on what to do?

I see I need to use App Registration to setup some kind of Redirection URL but I have no idea what to set it?

At the moment there is nothing in "App Registration" in Azure

User's image

Harsharanjeet Kaur 0 Reputation points

2024-07-24T08:38:40.0866667+00:00

I am as well working on it and getting the same error.
Will post the resolution once i find something.
Bruce S 0 Reputation points

2025-01-15T15:46:42.05+00:00

The error comes up, but it does create the Enterprise app.

2 answers

Your answer

Harsharanjeet Kaur 0 Reputation points

2024-07-24T08:38:40.0866667+00:00

I am as well working on it and getting the same error.
Will post the resolution once i find something.
Bruce S 0 Reputation points

2025-01-15T15:46:42.05+00:00

The error comes up, but it does create the Enterprise app.

Answer 1

Hello @Ronald,

Thank you for posting your query on Microsoft Q&A.

As you mentioned, you are attempting to enable the Microsoft PIN reset service for your users to recover a forgotten Windows Hello for Business PIN. You are encountering the error message "AADSTS500113: No reply address is registered for the application" when logging into the Microsoft Reset Pin Production Portal.

This error message is expected after granting admin consent to the Microsoft Pin Reset Client Production application. Please refer to the screenshot below to understand the process when registering the applications:

When you go to the Microsoft PIN Reset Service Production website, and sign in with Global administrator or at least an Application Administrator user, you will be prompted to consent to the application with the page shown below.

User's image

After clicking "Accept" and completing the consent for the application, you will be redirected to https://login.microsoftonline.com/common/Consent/Set with the mentioned error message. You do not need to take any action on this error; it is expected behavior following the consent acceptance, as outlined in the documentation. User's image To confirm that the two PIN Reset service principals are registered in your tenant, follow these steps:

Sign in to the Microsoft Entra Manager admin center
Select Microsoft Entra ID > Applications > Enterprise applications
Search by application name "Microsoft PIN" and verify that both Microsoft Pin Reset Service Production and Microsoft Pin Reset Client Production are in the list

I hope this information is helpful. Please feel free to reach out if you have any further questions.

If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.

Thanks,
Raja Pothuraju.

Answer 2

Ronald 10

@Raja Pothuraju Both are listed in Enterprise Application.

Raja Pothuraju 23,465 Reputation points Microsoft External Staff Moderator

2024-07-26T03:53:52.15+00:00

Hello @Ronald,

Thank you for your response.

Perfect. If those two applications are listed under Enterprise Applications, it means that admin consent was successfully granted as mentioned in the document. You can now proceed with the next steps to enable the Microsoft PIN reset service, allowing your users to recover a forgotten Windows Hello for Business PIN.

https://learn.microsoft.com/en-us/windows/security/identity-protection/hello-for-business/pin-reset?tabs=intune#how-nondestructive-pin-reset-works

Thanks,
Raja Pothuraju.
Raja Pothuraju 23,465 Reputation points Microsoft External Staff Moderator

2024-07-29T05:38:16.3333333+00:00

Hello @Ronald,

Following up to see if the above answer was helpful. If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.
Ronald 10 Reputation points

2024-07-29T05:54:19.3766667+00:00

It's not resolved. It still prompts with the same message even though it's in enterprise application
Raja Pothuraju 23,465 Reputation points Microsoft External Staff Moderator

2024-07-29T06:10:49.28+00:00

Hello @Ronald,

Thank you for your response.

It seems you are still following the steps to "Enable the Microsoft PIN Reset Service in your Microsoft Entra tenant" as outlined in the Microsoft document.

Enable the Microsoft PIN Reset Service in your Microsoft Entra tenant

As you confirmed and can see those applications in Enterprise apps, there is no need to give admin consent again to those applications. If you attempt to give admin consent by accessing the Microsoft PIN Reset Service Production website and Microsoft PIN Reset Client Production website you will receive the same error message as part of the flow. This error is expected after granting consent to the application.

You can proceed with the next steps as mentioned in the document:

Enable PIN recovery on the clients

Thanks,
Raja Pothuraju.
Raja Pothuraju 23,465 Reputation points Microsoft External Staff Moderator

2024-08-01T13:08:36.63+00:00

Hello @Ronald,

Following up to see if the above answer was helpful. If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.

Share via

Setting up Microsoft PIN Reset Service - AADSTS500113: No reply address is registered for the application.

2 answers

Your answer