AADSTS50011 Error when referencing Azure Active Directory Powershell

Question

I'm attempting to set up a controlled-access computer such that users can only access the machine if they are in a corresponding Security Group. The code I've been advised to run for this setup is below. When I run it, I get an AADSTS50011 error when I go to authenticate that I'm not sure how to resolve (pasted below), I've double-checked that the client ID is correct.

"""

    1. Launch Powershell ISE as an Administrator.

2. Run the following script to setup MS Graph:
```Install-Module Microsoft.Graph

```yaml
3. Run the following script to set your Execution Policy:
```Set-ExecutionPolicy -ExecutionPolicy Unrestricted

```sql
4. Run the following script to add the SG to the permissions level you want. You will need to change XXXXXXXX to your specific object ID from your SG, and you will need to change YYYYYYY to either User or Power User depending on the permissions you want to give them.
```Connect-MgGraph -ClientId 1b730954-1685-4b74-9bfd-dac224a7b894 -Scopes .default -TenantId microsoft.com

```powershell
#get the objectID from AAD



$ObjID = "XXXXXXXXXXXXXXXXXXX"



$SID = (Get-MgGroup -GroupId $ObjID -Property securityidentifier).securityidentifier



Add-LocalGroupMember "YYYYYYYYYY" -Member $SID
```"""

![Error Message 1](/api/attachments/31e8cd87-e4ca-49e8-8f85-f1cf2fe16f9d?platform=QnA)

Answer 1

Hi @Daniel Seitz (DXC Technology Services LLC)

Thank you for reaching Microsoft Q&A Forum!

Based on the error code AADSTS50011 it indicates that there is a mismatch between the reply address configured for the Azure Active Directory application and the reply address in the authentication request. Make sure the redirect URI matches the reply Url configured on your application.

Kindly update reply url in the application by navigating to Entra admin center Portal > Identity> Applications > App Registrations > All apps > Search with client ID (aka app ID) > Under Authentication blade of the application > update the reply url.

Reference: Error AADSTS50011 with OpenID authentication: The redirect URI specified in the request does not match
Error AADSTS50011 with SAML authentication - The reply URL specified in the request does not match

Hope this helps. Do let us know if you any further queries by responding in the comments section.

Thanks,

Akhilesh.

---

If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.