title: AAD Reply Url Issue with https
body: <p>We have an on-prem asp.net core app that leverage AAD for authentication, the app is setup to run in both:</p>
  
  <p><a href="http://domainserver/app" rel="nofollow noreferrer">http://domainserver/app</a>
  &amp;
  <a href="https://domainserver/app" rel="nofollow noreferrer">https://domainserver/app</a></p>
  
  <p>In Azure AD the reply url for the application is setup as
  <a href="http://domainserver/app/signin-oidc" rel="nofollow noreferrer">http://domainserver/app/signin-oidc</a> &amp; <a href="https://domainserver/app/signin-oidc" rel="nofollow noreferrer">https://domainserver/app/signin-oidc</a></p>
  
  <p>When using http url, the sign-in process works fine, however in https mode, we get the following error:</p>
  
  <blockquote>
    <p>AADSTS50011: The reply address ‘<a href="https://domainserver/app/signin-oidc" rel="nofollow noreferrer">https://domainserver/app/signin-oidc</a>’
    does not match the reply addresses configured for the application:
    appguid . More details: not specified</p>
  </blockquote>
  
  <p>The reply https url is setup in AAD for the App exactly as it appears in the error message, so I’m not sure why it says it’s not matching.
  One reason I can think of is that the SSL certificate used for https is a local domain signed certificate, and somehow it’s causing the error.  But I’m not sure if that’s the case since AAD is just responsible to redirect back to the specified url, should not really care or know about the validity of the SSL. </p>
  
  <p><a href="https://i.stack.imgur.com/Olvso.jpg" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/Olvso.jpg" alt="enter image description here"></a></p>
  
  <p>Here is the image showing the setting url, the redirect url and the error message url matches exactly.  You just have to trust me the part that's blocked out are also the same. :)</p>
  
  <p>Anyone got any ideas why this happens?</p>