Azure App Service
Azure App Service is a service used to create and deploy scalable, mission-critical web apps.
8,190 questions
Still poppin' up the: Error AADSTS50011 with OpenID authentication
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(163.2, 80%, 25%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ETN%3C/text%3E%3C/svg%3E)
Twisting nether
0
Reputation points
Dear support,
I deployed my web app in Azure Portal and made some changes via Visual Studio Code.
Next step, I wanted to redirect it from my local host to the default domain with the changes from VS code but i still receive this redundant with no end technical authentification failure:
"Sorry, but we’re having trouble signing you in.
AADSTS50011: The redirect URI 'https://gbdp203webapp-d9ehbngkh9g6eed7.polandcentral-01.azurewebsites.net/.auth/login/aad/callback' specified in the request does not match the redirect URIs configured for the application 'be54685c-c10f-4824-83e4-e97cfb4dfda2'. Make sure the redirect URI sent in the request matches one added to your application in the Azure portal. Navigate to https://aka.ms/redirectUriMismatchError to learn more about how to fix this."
I checked MS learn and implemented step by step all the instructions and still facing this technical issue.
So, i copied my URL of default domain from overview/properties blade(Webapp): https://gbdp203webapp-d9ehbngkh9g6eed7.polandcentral-01.azurewebsites.net , get in in Microsoft Entra ID> Authentification > Add platform > Added Web > Pasted > in Redirect URI tab, together with the https://localhost:5015 according with the below picture.
I used the same steps from the demo video from MS learn associated for this technical issue and it still pops the authentification page with errors.
What is the root cause? What should I do more than I already did according with the MS learn steps and demo from Youtube.
BTW. The selected tokens you would like to be issued by the authorization endpoint:
ID tokens (used for implicit and hybrid flows) > it is already checked in the box, see the below picture.
I'm just making playarounds and workarounds for several days by now. What is the solution for this stupid MS issue?
{count} votes
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(35.2, 74%, 13%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EDG%3C/text%3E%3C/svg%3E)
Divyesh Govaerdhanan 640 Reputation points2024-12-18T22:20:50.54+00:00 The redirect URL below needs to be added to the application. It is the URL your application is sending while you're requesting authorization.
https://gbdp203webapp-d9ehbngkh9g6eed7.polandcentral-01.azurewebsites.net/.auth/login/aad/callback
Please accept the answer if it helps.
-
Twisting nether 0 Reputation points
2024-12-19T14:15:48.0266667+00:00 I tried already with full extension in the URL path and I received the same technical error, it does not matter if it's with all extension or not "/.auth/login/aad/callback".
I also tried with separate extensions, just with "/.auth or /login/ or /aad/callback,
Nothing works, any serious solution regarding this issue? What is the root cause?
My trial period is decreasing and still can't get a technical support with this.
Please see my attached pictures to convince yourself.
Extension added in URL .auth login aad callback on App registrations.JPG
After VS Studio code deployment on my WebApp default domain from Azure.JPG
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(185.6, 59%, 27%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESM%3C/text%3E%3C/svg%3E)
SnehaAgrawal-MSFT 22,166 Reputation points2025-01-03T10:41:50.3733333+00:00 @Twisting nether Apologies for late response here!
This error occurs if the redirect URI (reply URL) configured in the application (code) and the Microsoft Entra app registration don't match.
When a user accesses the application for authentication, the application redirects the user to Microsoft Entra ID with a predefined redirect URI. Once the user is authorized successfully, Microsoft Entra ID verifies the following values:
- The redirect URI sent from the application
- The redirect URI values in the registered application in Microsoft Entra ID
If the redirect URI the application sent doesn't match any of the redirect URIs in Microsoft Entra ID, error AADSTS50011 will be returned. If the values match, Microsoft Entra ID sends the user to the redirect URI.
To fix the issue, follow these steps to add a redirect URI in Microsoft Entra app registration.
Note- If the redirect URI sent from the application isn't the desired one, you should update your application code or configuration.
Please let us know if issue remains.
Sign in to comment
Sign in to answer