Instructions incomplete about active-directory-dotnet-webapp-openidconnect-aspnetcore

[RolandLeFranc]

I had to add http://localhost:55643/signin-oidc to the list of Reply URLS in the Azure AAD settings.

[jmprieur]

I understand that IIS Express ran the sample from localhost:55643 and not localhost:5000 as explained in the Readme.md. See step 1.5.
Now why was the sample run from a different base URL? did you change it, @RolandLeFranc ?

[RolandLeFranc]

It's not about the port being different. The step is missing in the doc.

[jmprieur]

Do you want something else than step 1.5 ?

[taggie05]

We had the same issue we had to add localhost to the reply url. Why exactly is a localhost url needed in a reply url in Azure Registered App ? I want to understand why we need to input a localhost url and why the error: AADSTS50011 is occurring without it.

[jmprieur]

@taggie05 : what happens is that the authentication is delegated to Azure Active Directory, which let the user enter the credentials, do the multi-factor authentication (if needed) and other conditional access, requests consent from the user (if needed), and then calls back the application at the Reply URL with the access token (or, in this case, a code that can be redeemed to get an access token).
As long as you are running the Web app in a local browser, you need this Reply URL.
When you deploy it to Azure (for instance), you'll need to update the Reply URLs in the application registration.