GitHub user dosubot[bot] added a comment to the discussion: How to enable sso login in Superset 5.0.0?
<!-- Answer --> The error "AADSTS900971: No reply address provided" means your Azure AD app registration is missing the correct redirect URI (reply address) for Superset. For Azure SSO to work, you must register the exact redirect URI that Superset uses for OAuth callbacks in your Azure AD app. For Superset, the redirect URI is usually: ``` https://<your-superset-domain>/oauth-authorized/azure ``` Replace `<your-superset-domain>` with your actual Superset hostname (including https if you use SSL). This URI must match exactly—protocol, domain, and path—with what you register in Azure AD, or you'll get this error. If you use a proxy or load balancer, set `ENABLE_PROXY_FIX = True` in your `superset_config.py` to ensure the correct redirect URI is generated and used by Superset, especially to avoid http/https mismatches. To fix: 1. Go to your Azure AD app registration → "Authentication" → "Redirect URIs". 2. Add the URI above (with your real domain). 3. Save the changes and try logging in again. If you still see the error, double-check for typos, protocol mismatches (http vs https), or missing path segments. If you’re behind a proxy, make sure it isn’t rewriting the host or path in a way that changes the callback URL. More details and examples are in [this discussion](https://github.com/apache/superset/discussions/32622) and [this config guide](https://github.com/apache/superset/discussions/32424). <!-- Dosu Comment Footer --> *To reply, just mention [@dosu](https://go.dosu.dev/dosubot).* --- <sup>How did I do? [Good](https://app.dosu.dev/response-feedback/c000a578-dacc-41be-aafa-24f88693a8c2?feedback_type=great_response) | [Irrelevant](https://app.dosu.dev/response-feedback/c000a578-dacc-41be-aafa-24f88693a8c2?feedback_type=irrelevant_answer) | [Incorrect](https://app.dosu.dev/response-feedback/c000a578-dacc-41be-aafa-24f88693a8c2?feedback_type=incorrect_sources) | [Verbose](https://app.dosu.dev/response-feedback/c000a578-dacc-41be-aafa-24f88693a8c2?feedback_type=too_verbose) | [Hallucination](https://app.dosu.dev/response-feedback/c000a578-dacc-41be-aafa-24f88693a8c2?feedback_type=hallucination) | [Report 🐛](https://app.dosu.dev/response-feedback/c000a578-dacc-41be-aafa-24f88693a8c2?feedback_type=bug_report) | [Other](https://app.dosu.dev/response-feedback/c000a578-dacc-41be-aafa-24f88693a8c2?feedback_type=other)</sup> [](https://app.dosu.dev/a28d3c7e-a9d3-459e-9fb6-3a6f9ff4f357/ask?utm_source=github)& nbsp;[](https://go.dosu.dev/discord-bot) [](https://twitter.com/intent/tweet?text=%40dosu_ai%20helped%20me%20solve%20this%20issue!&url=https%3A//github.com/apache/superset/discussions/34542) GitHub link: https://github.com/apache/superset/discussions/34542#discussioncomment-14019368 ---- This is an automatically sent email for [email protected]. To unsubscribe, please send an email to: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
