AADSTS50011 Error when referencing Azure Active Directory Powershell

Anonymous
2024-10-03T21:07:10.5166667+00:00

I'm attempting to set up a controlled-access computer such that users can only access the machine if they are in a corresponding Security Group. The code I've been advised to run for this setup is below. When I run it, I get an AADSTS50011 error when I go to authenticate that I'm not sure how to resolve (pasted below), I've double-checked that the client ID is correct.

"""

    1. Launch Powershell ISE as an Administrator.

2. Run the following script to setup MS Graph:
Install-Module Microsoft.Graph

yaml
3. Run the following script to set your Execution Policy:
Set-ExecutionPolicy -ExecutionPolicy Unrestricted

sql
4. Run the following script to add the SG to the permissions level you want. You will need to change XXXXXXXX to your specific object ID from your SG, and you will need to change YYYYYYY to either User or Power User depending on the permissions you want to give them.
Connect-MgGraph -ClientId XXXXXXXXXXXXXXXXXXX -Scopes .default -TenantId microsoft.com

powershell
#get the objectID from AAD



$ObjID = "XXXXXXXXXXXXXXXXXXX"



$SID = (Get-MgGroup -GroupId $ObjID -Property securityidentifier).securityidentifier



Add-LocalGroupMember "YYYYYYYYYY" -Member $SID
"""

![Error Message 1](/api/attachments/31e8cd87-e4ca-49e8-8f85-f1cf2fe16f9d?platform=QnA)

Azure Role-based access control
Azure Role-based access control

An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.

0 comments No comments

Answer accepted by question author
Akhilesh Vallamkonda 15,275 Reputation points Moderator
2024-10-08T18:32:30.82+00:00

Hi @Daniel Seitz (DXC Technology Services LLC)

Thank you for reaching Microsoft Q&A Forum!

Based on the error code AADSTS50011 it indicates that there is a mismatch between the reply address configured for the Azure Active Directory application and the reply address in the authentication request. Make sure the redirect URI matches the reply Url configured on your application.

Kindly update reply url in the application by navigating to Entra admin center Portal > Identity> Applications > App Registrations > All apps > Search with client ID (aka app ID) > Under Authentication blade of the application > update the reply url.

Reference: Error AADSTS50011 with OpenID authentication: The redirect URI specified in the request does not match
Error AADSTS50011 with SAML authentication - The reply URL specified in the request does not match

Hope this helps. Do let us know if you any further queries by responding in the comments section.

Thanks,

Akhilesh.


If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.

Was this answer helpful?


0 additional answers

Sort by: Newest

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.