D365 Demo environment issue

Please note that Q&A forum is a public platform, and moderators will modify the question to hide personal information in the description. Kindly ensure that you hide any personal or organizational information the next time you post an error or other details to protect personal data.

Dear Jeevanantham Prathaban

First, please review the Q&A Assist response, as it closely aligns with my understanding of this issue. Additionally, you may find the following Microsoft article helpful for reference: Error AADSTS50011 with OpenID authentication: The redirect URI specified in the request does not match

In most cases, this issue requires updating the App Registration in Microsoft Entra ID and ensuring that your local/environment URL is correctly whitelisted.

Please follow these steps:

1. Sign in to the Azure Portal using an administrator account for the tenant associated with your demo environment.
2. Navigate to Microsoft Entra ID > App registrations. Select View all applications in the directory, then choose the application whose App ID appears in the error message.
3. From the left-hand menu, select Authentication.
4. Under the Redirect URIs section: Click Add URI if no redirect URI exists or choose Edit the existing redirect URI if it is incorrect.
5. Paste the environment URL exactly as shown in the error message: https://......dynamics.com/
6. Save the changes.

Please wait three to five minutes for the changes to take effect, then attempt the login again. You should now be able to sign in successfully. If the Microsoft Entra login page does not appear, try clearing your browser’s cached credentials or use an InPrivate/Incognito browser session.

If the redirect URI being sent by the application is not the intended one, you will need to update the application’s code or configuration accordingly.

I hope this information is helpful. If you encounter any difficulties, please don’t hesitate to reach out. If this guidance does not apply to your specific scenario, kindly share more details so we can further investigate.

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

The error AADSTS50011 means the redirect URI in the sign-in request (https://usnconeboxax1aos.cloud.onebox.dynamics.com/) is not present in the list of redirect URIs configured for the application ID 00000015-0000-0000-c000-000000000000 in Microsoft Entra ID.

To resolve this for a D365 one-box/demo environment:

1. In Microsoft Entra admin center, open the app registration that corresponds to the Finance and Operations client (the app using ID 00000015-0000-0000-c000-000000000000 in this scenario).
2. Go to the Redirect URI / Reply URL configuration for that application.
3. Add the environment URL and OAuth URL as redirect URIs:
   • https://usnconeboxax1aos.cloud.onebox.dynamics.com/
   • https://usnconeboxax1aos.cloud.onebox.dynamics.com/oauth
4. Save the changes.

For secure one-box development environments, also ensure:

• The environment URL is added as a redirect URI under the Web App platform.
• The environment OAuth URL (EnvironmentURL/oauth) is added as a redirect URI under the Web App platform.
• The wif.config file on the one-box has the correct audience URI entries, including the spn:00000015-0000-0000-c000-000000000000 value and any additional application IDs used.

If there are extra or incorrect reply URLs configured (for example, localhost or unused URLs), remove them so that Microsoft Entra ID does not select an unintended reply URL during sign-in.

If the redirect URI in the request still does not match any configured URI after these changes, the same AADSTS50011 error will continue to appear, so verify the exact URL string and protocol (https) match what is configured.

References:

• Secure one-box development environments
• Microsoft Entra ID is sending the token to an incorrect reply URL endpoint or localhost
• Redirect URI (reply URL) outline and restrictions
• What are the restrictions of redirect URIs for Microsoft Entra applications?