Redirect URI with Entra ID External ID Problem

(0) Share

Report

Posted on by JBC777

I am trying to set up a system to authenticate external users for a Power Pages App. Its for partners, not employees and thus we need to focus on external ID's.

if you look at the screenshots below, i am able to register a new user in Entra, but as soon as we have register the user, then i seem to be sent to the wrong page. the same error happens if i run in Power Pages (preview) or if i run the user flow from Entra.

the problem sees to be with the redirect URI in power pages. it either doesn't exist OR isn't set up to accept a token correctly. Any ideas?
the problem is the same if i run the user flow in Entra OR if i preview this in Power Pages
i can register the new user fine, its once the token is created, so it sounds like a Power pages config / problem
In entra, i have set up the redirect as 'web'
after conffig changes i am restarting the webapp.
I am following this https://learn.microsoft.com/en-us/power-pages/security/authentication/entra-external-idhttps://learn.microsoft.com/en-us/power-pages/security/authentication/entra-external-id

when i click on 'sign in' in the app i get sent to the page i would expect in Entra.

I click through the screens and all is good and get to this one

Fill in the detail above and click 'next'. at this stage the user appears in Entra (as expected)

i am redirected to this URL https://xxx.powerappsportals.com/signin-openid_1#id_token=xxx which isn't recognised on my site.

The redirect URI is the default one and to confirm you can see the original Redirect URI that i posted into Entra (and Entra is redirecting back to),

any ideas?

Categories:

Security

I have the same question (0)

All responses (3)

Answers (0)

MikeUllrich 2 on at

Like (0)

Report
Copy link

Link copied!

We had a similar problem but only with 2 users out of 10. Both non working users are from tenants with users that are working.

It seems there is a problem with the invitation code which was generated by Dynamics automatically. generating a new invitation code worked. Maybe this solves your problem, too.

Was this reply helpful? Yes No
Suggested answer

oliver.rodrigues 9,425 Most Valuable Professional on at

Like (0)

Report
Copy link

Link copied!

Hi

Within Entra External, in your App Registration, can you confirm what is the Redirect URL that you have setup there?

I have it pointing to my portal home page, and JWT for testing purposes but that's optional

Was this reply helpful? Yes No
Suggested answer

JBC777 67 on at

Like (0)

Report
Copy link

Link copied!

Thanks for the replies. I think the solution to my problem was simply time!

My issue seems to have been that just pressing sync and also restarting the site, didn't sync all the changes.

As a 'developer in a rush' i was likley making additional changes when the original ones hadn't synced, and thus 'looked' like errors.

I haven't done anything different than i did in the document apart from wait, and much more than 15 mins.

Sorry for just a 'boaring' solution but i took me a week to figure this out.

Was this reply helpful? Yes No