A kelp-ash glaze studio’s sign-in fails with a redirect URI mismatch after a teammate changed the web app’s public URL. What should the developer update?
Select an answer to reveal the explanation.
Short Explanation
Entra is picky about where it sends people after login. If the live URL changed, the app registration’s redirect URI (and web vs SPA platform) has to match exactly.
Full Explanation
The identity platform validates that the redirect_uri in the authorize request exactly matches a URI registered for the application and platform (web, SPA, or public client). Changing the deployed app URL without updating the registration produces a redirect mismatch error. Custom-domain TLS on App Service is separate from this registration setting.