Resource Token Provider as an Azure Function

Question

I've been following the guide in this repo to setup a resource token provider as an Azure function.

https://github.com/adamhockemeyer/Azure-Functions---CosmosDB-ResourceToken-Broker

I've setup the Cosmos DB, App registration, and Azure function with permissions according to the instructions. When I get to step 3 in the guide where I enter https://{function-url}/.auth/login/{provider} into my browser I get the following error.

ADSTS50011: The reply url specified in the request does not match the reply urls configured for the application: [App id]

Update

I changed the Reply URL in my App Registration to https://{function-url}/.auth/login/{provider}/callback with {function-url} as my Function App URL. Originally I had it set to one of my Function URL's. Now i'm getting a 404 not found error.

App Registration Redirect URL

Function App URL

Function App Authentication Settings

Answer 1

You need to add the URL as below in your app registration, then it should work.

Note : After adding the URl, go back to the Authentication / Authorization in your functionapp, turn off the Authentication Providers whcih you configured -> turn off Authentication / Authorization , then turn on and configure again, otherwise it seems not become effective.

https://{function-url}/.auth/login/{provider}/callback

Update :

Turn off all the configuration and create the new AD App like below.