microsoft / microsoft/AzureStorageExplorer

Authentication Broker sign-in fails for Azure China on macOS with redirect URI mismatch

Open
#9,045 5 comments 0 reactions 1 assignee View on GitHub

@craxal is already working on this.

Since Jun 15, 2026.

:computer: mac :gear: identity service :gear: sign-in :test_tube: testing
Dominant language
No language data
Stars
452
Forks
92
Avg merge
15h 20m
Merged PRs (30d)
3

Description

Storage Explorer Version

1.43.0

Regression From

Not a regression

Architecture

x64

Storage Explorer Build Number

20260421.1

Platform

macOS

OS Version

MacOS Tahoe 26.4.3

Bug Description

When signing into an Azure China account using Authentication Broker on macOS in Azure Storage Explorer, the sign-in fails with a WAM error indicating a redirect URI mismatch (AADSTS50011).

Resource Types

No response

Authentication Method

Sign in

Connection Type

None

Steps to Reproduce
  1. Launch Azure Storage Explorer on macOS。
  2. Ensure Authentication Broker is enabled。
  3. Open Connect dialog -> Click 'Subscription' -> Select Azure China -> Click 'Next'.
  4. Attempt to authenticate with an Azure China account.
  5. Check if the sign-in succeeds.
Actual Experience

Sign-in fails with AADSTS50011 (redirect URI mismatch).

Image

Error details:
{ "message": "\"WAM Error \\n Error Code: -51411 \\n Error Message: ApiContractViolation \\n WAM Error Message: AADSTS50011 Description: Error Domain=MSAIMSIDOAuthErrorDomain Code=-51411 \\\"(null)\\\" UserInfo={MSAIMSIDErrorDescriptionKey=AADSTS50011: The redirect URI 'msauth.com.msauth.unsignedapp://auth/' specified in the request does not match the redirect URIs configured for the application 'e0001ebd-e920-49b8-a27e-92e573ec0af6'. Make sure the redirect URI sent in the request matches one added to your application in the Azure portal. Navigate to https://aka.ms/redirectUriMismatchError to learn more about how to fix this. Trace ID: 1b149920-6882-49bf-a6d8-1c5ccd181300 Correlation ID: a7bc50b0-fdc1-4353-808e-18edee3209b7 Timestamp: 2026-04-21 08:14:02Z, MSAIMSIDBrokerVersionKey=5.2603.0, MSAIMSIDOAuthErrorKey=invalid_client, MSAIMSIDCorrelationIdKey=A7BC50B0-FDC1-4353-808E-18EDEE3209B7}, Domain: MSAIMSIDOAuthErrorDomain.Error was thrown in sourceArea: Broker \\n Internal Error Code: 506287837 \\n See troubleshooting: https://aka.ms/msal-net-wam \\n\"" }

Expected Experience

The sign-in succeeds.

Additional Context

Here is the record:

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.