Azure AD Out-of-the-box Authentication not Working!

Question

Azure AD Out-of-the-box Authentication not Working!

Kevin Azure 141

I created an App Service & App Registration connected them both using App Service > Authentication blade > Advanced Settings.

While launching the URL - even with successful authentication - it is throwing error:
AADSTS50011: The reply URL specified in the request does not match the reply URLs configured for the application: '6f82e422-41cb-4291-95ad-234bd5f942eb

BUT the Login URL shows it is correct as per configured.
alt text

URL:
https://working-angular-webapi.azurewebsites.net/

Email: aadtester@jeanpaulvagmail.onmicrosoft.com
Password: authentication1!

Answer 1

ShashiShailaj-MSFT 7,466 Microsoft Employee

Hello Paul ,
I checked this and found that the redirect URI which you have mentioned in the settings on Azure AD is not absolute match .
alt text

Could you please change the same from https://working-angular-webapi.azurewebsites.net/ to https://working-angular-webapi.azurewebsites.net/.auth/login/aad/callback because I think the redirect URI needs to exactly tell the http client about the endpoint within the application which can process the response by the federation service (which in this case is Azure AD) .

I hope this works in your case. In case it does , please do mark this as answer and if this does not help , please do comment with your findings and we will be happy to continue the conversation.

Thank you.

Kevin Azure 141 Reputation points

2020-01-16T23:30:57.863+00:00
Thank you Shashi!

It worked.

(after I changed the Redirect URI as you said as below)

Can you please tell me following?

how you got the above table displaying redirect_url , client_id etc?

is that the ID Token been posted on the redirect url?

can i use an Angular/JS url for receiving the postback - so that i can save the id token?
ShashiShailaj-MSFT 7,466 Reputation points Microsoft Employee

2020-01-20T16:35:17.58+00:00

Sure Paul ,

I used the Web debugging tool fiddler to get that information while trying to replicate the issue. You may need to set it up on your machine before you can use it to capture traffic. You need to have local administrator rights on your machine in order to install fiddler. You will need to enable HTTPS traffic decryption. Once you have it installed you can find the tab on the right called Inspectors > Webforms where you can see the information I have provided in screenshot above.

hope this helps.

Azure AD Out-of-the-box Authentication not Working!

0 additional answers

Activity