AADSTS50011 Reply URL Error for single user

Logan Grieser 21 Reputation points
2020-11-19T01:04:21.977+00:00

I have an in-house Blazor App that uses the built-in Azure AD Single Sign On. I have the app registration set up correctly (I believe) as the majority of my users are able to access and use the app without issues.

I have one user who receives an AADSTS50011 error: The reply URL specified in the request does not match the reply URLs configured for the application : 'myappid'.

The use receives this error on their devices, but not when logging in from different devices, which leads me to believe there is something cached that's causing the problem but I've had the user clear their history and cached data, neither has worked. I've had them try private browsing, multiple browsers, all not working. What did work was having the user enter "Guest" mode in Chrome.

It appears that the user has previously signed into another organization's AD system from those devices, and I'm wondering if those cached credentials are causing the problem. Has anyone encountered this before?

The Blazor App uses .NET Core 3.1 and the Azure AD Nuget Package Microsoft.AspNetCore.Authentication.AzureAD.UI version 3.1.9 and was created from this tutorial: https://video2.skills-academy.com/en-us/azure/active-directory/develop/tutorial-blazor-server

Some data from one of the failed requests:
Request ID
7ff66145-120b-4a70-a580-8f66905f0d00
Correlation ID
ca0440c0-50f3-4bc2-8e60-1c4571e68ccd
Authentication requirement
Single-factor authentication
Status
Failure
Sign-in error code
50011
Failure reason
The reply URL specified in the request does not match the reply URLs configured for the application: '{identifier}'. {detail}
Application ID
84e75cf0-4f4d-4b0a-821d-b9acfd17313d

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
21,435 questions
0 comments No comments
{count} votes

Accepted answer
  1. AmanpreetSingh-MSFT 56,556 Reputation points
    2020-11-19T05:31:23.493+00:00

    HI @Logan Grieser · Welcome to Q&A platform and thanks for your query.

    The reply url in your request is https://www.bbt*********.com/signin-oidc but the Reply URLs registered in your app are:

    • https://bb*********.com/signin-oidc/
    • https://bb*********.com/signin-oidc

    To resolve the issue, kindly update the reply url registered in your app so that it matches with the reply url in your request.


    Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

    1 person found this answer helpful.

0 additional answers

Sort by: Most helpful

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.