This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(86.4, 48%, 18%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
Hello team,
I have a problem when trying to login as user via Microsoft OIDC flow! The request is received by Azure, authentication is successful in Azure access logs, the response with cookie is sent back to the app, but I receive an error message "HTTP Status 400 - Bad Request"!
This flow was working before and this new error apears just yesterday without any change done in app side or Azure conf!
The request URL is like the following "https://app-domain/frontend/endpoint/microsoft/authenticate", and the I added the redirect URI "https://app-domain/frontend/endpoint/microsoft/back" to the "Redirect URIs" section in App Registration Authentication tab.
Could you help me to understand this issue and how to resolve it please ?
Many thanks in advanc efor your help.
Best Regards
A cloud-based identity and access management service for securing user authentication and resource access
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(153.6, 51%, 24%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAN%3C/text%3E%3C/svg%3E)
Hello @Anass
Thank you for reaching out to Q&A. I see you mentioned that it was working earlier, could you please check on the session state and token request.
Ichecked and session cookies are valid. session state contain a specific identifier. Status code is "400 Bad Request"
Request URL: https://app-domain/frontend/endpoint/microsoft/back?code=1.XXX...
Request Method: GET
Status Code: 400 Bad Request
cookie: app=XXX...
state: xxx
session_state: XXX
Hello @Anass
Thank you for confirming that the issue is resolved which was due to HTTP header size. As mentioned in the query, the Azure authentication is done, post sending the token it is application will take over the flow.
Thanks,
Aditya