AzureAD authentication only works on local

问题

Ive set up my AzureAD in the portal, and an appservice that uses the AD to authenticate following instructions from microsoft.

Ive made a .net core app that uses this authorisation. It works on my localhost. But when i publish it i get this error

AADSTS50011: The reply url specified in the request does not match the reply urls configured for the application: '614f66a9-xxxx-483a-8bc7-xxxxxxx'

What should i change and how come it works in my local but not when published?

This is current configuration of app:

 {
  "AzureAd": {
    "Instance": "https://login.microsoftonline.com/",
    "Domain": "lmyName.onmicrosoft.com",
    "TenantId": "******-ebd5-40d8-829b-*********",
    "ClientId": "*****-8eef-483a-8bc7-********",
    "CallbackPath": "/signin-oidc"
  },
  "Logging": {
    "IncludeScopes": false,
    "LogLevel": {
      "Default": "Warning"
    }
  }
}

When i followed the online intructions i was directed to configure the appservice in the portal to use reply URL: /.auth/login/aad/callback

Could that be the same as callbackPath?

回答1:

For your case, you can change your reply URL in AAD Application to be <YourApplicaitonURL>/signin-oidc.

NOTE The base address in the Sign-on URL and Logout URL settings is http://localhost:port.

This localhost address allows the sample app to run insecurely from your local system. Port is the default port for the Kestrel server. Update the reply URL in your AAD Application if you configure the app for production use(If you publish your App to Azure Web App service).

For example, https://yourapp.azurewebsites.net/signin-oidc or https://www.contoso.com/signout-oidc

You can also refer to this Sample to Integrate Azure AD into an ASP.NET Core web app.

Please let me know if it helps!

来源：https://stackoverflow.com/questions/49923017/azuread-authentication-only-works-on-local