CODEWITHSUNDEEP
authenticationazure-active-directory
Tom
Tom

Reputation: 1

Exception AADSTS50011 is thrown when using azure ad authentication

I have been developing a C# MVC application. Using azure ad to authenticate the users.

But when deployed on IIS, it can only works when accessing the website by "https://localhost". But an error is thrown when accessing the website by "https://machinename".

AADSTS50011: The reply URL specified in the request does not match the reply URLs configured for the application: '4e392b7a-####-####-####-####'.


2 urls are configured on the azure ad authentication:
https://machinename/
https://localhost/

The configuration in the file web.config:

<add key="ClientId" value="4e392b7a-####-####-####-############" />
<add key="Tenant" value="72f988bf-####-####-####-############" />
<add key="Authority" value="https://login.microsoftonline.com/{0}/v2.0" />
<add key="RedirectUri" value="https://machinename/" />
<add key="PostLogoutRedirectUri" value="https://machinename/KeepAlive/SignOut" />

Upvotes: 0

Views: 248

Answers (1)

Carl Zhao
Carl Zhao

Reputation: 9539

According to your error message, you must ensure that the reply URL in the Azure portal is exactly the same as the reply URL configured by the application.

I have answered similar questions before, There is a general solution to the problem of not match:

When you visit the application url , you will be redirected to the login page. Decode the authorization request URL, you will find redirect_uri, copy the value of redirect_uri and paste it into the azure portal, and try again.

enter image description here

Update:

Thanks for the solution provided by @Tom. For this error, you also need to add the port :

https://machinename/{port}
https://localhost/{port}

Upvotes: 0

Related Questions