[App Server] Redirect URI field for MS Azure SSO

I’m running the anvil app server on my own Debian box, I have the application ID / tenant ID / secret all configured, and I can trigger the MS Login popup box and authenticate, but then get the message:

"AADSTS50011: The reply URL specified in the request does not match the reply URLs configured for the application: 'xxxxx-xxxxx-xxxxx-xxxxx'" (removed my Application ID)

The Anvil docs say that the Azure application registration field “URI Field” should be set to https://anvil.works/apps/_/microsoft_auth_callback. Do I need to change that to point at my server instead? Do I just replace the anvil.works with my own FQDN?

Cheers,
Ken

Solved. Set the URI Field to:

https://my.server.com/_/microsoft_auth_callback

Posting this in case someone else runs into the same problem, as I don’t see it mentioned anywhere. Seems obvious, but I had to bug our AD administrator several times to try variants.

Cheers,
Ken

2 Likes

Thanks for sharing this! I’m running into the same issue, even with setting the redirect URI to what you specified. May I ask what other settings you used to register your app in Azure?

  • Single or multitenant?
  • Both implicit and hybrid flows?
  • other non default configuration?

Thanks in advance!

[EDIT]: Nevermind, https://anvil.works/apps/_/microsoft_auth_callback works. Totally missed the nice blog post from Anvil.