How to work with dynamic values in redirect URIs (Azure AD)

Question

I know that Azure AD App registration does not allow wildcards in redirect URIs and that RFC 6819 is really strict about it. But in our CI/CD workflow we generate a new review app, with a dynamic URL, for each new Merge Request. So if I have two Merge Requests awaiting for review, 'my-mr-1' and 'my-mr-2', I'll have two new generated web apps with their own dynamic URIS:

https://app-review-mymr1.domain.com/
https://app-review-mymr2.domain.com/

Any way to allow a redirect URI in Azure AD to work for everything like https://app-review-*.domain.com/?

Thanks!

https://app-review-mymr1.domain.com/
https://app-review-mymr2.domain.com/

Any way to allow a redirect URI in Azure AD to work for everything like https://app-review-*.domain.com/?

Thanks!

user_8469879 · Answer

https://docs.microsoft.com/en-us/azure/active-directory/develop/reply-url#restrictions-using-a-wildcard-in-uris

According to this document, you can set wildcard in the URIs with some restrictions.

user_2898941 · Answer

The Ui has restictions but the cli does not. you can do

az ad app update --id  --add replyUrls "https://*.domain.com/"

How to work with dynamic values in redirect URIs (Azure AD)

2 Answers