AADSTS50011: The reply URL specified in the request does not match the reply URLs configured for the application:

Question

Hi Team,

I am using simplesamlphp library in php for SP and used metadata xml from IDP. While I test the sp connectivity, I am getting the below error.

I have verified the reply url configuration and looks fine. Would like your advice on the error.

Request Id: 3384c122-ae81-4e12-b311-10cfe024f800
Correlation Id: 1725c066-4f51-4070-8d9b-0b30e6391360
Timestamp: 2020-08-19T13:54:28Z
Message: AADSTS50011: The reply URL specified in the request does not match the reply URLs configured for the application:

Answer 1

Hi @Suresh, Amith A. (ELS-CHN)

By tracking the correlation ID, I found that the request contains reply url: http://dev.xx.xxxxxxer.com/simplesaml/module.php/saml/sp/saml2-acs.php/default-sp. However, the app EAEL-XXX-XXX UCApp, is configured with reply url (aka redirect_uri): https://dev.xx.xxxxxxer.com/ui/app/#/instantidentifierconfig.

To resolve the issue, you need to:

• Either update the application code to send https://dev.xx.xxxxxxer.com/ui/app/#/instantidentifierconfig as reply_url in the authentication request.
• Or update your app with redirect_url to http://dev.xx.xxxxxxer.com/simplesaml/module.php/saml/sp/saml2-acs.php/default-sp

-----------------------------------------------------------------------------------------------------------

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.