Share via

Trying to connect with Entra ID to a Windows 11 Virtual machine receiving AADSTS500113 error

JohnSebastian-3934 546 Reputation points
2025-12-01T22:06:18.8733333+00:00

I've got two Windows 11 VMs that are Entra ID Joined. Both have the AADLoginforWindows extention.

I'm trying to use Entra ID authentication from the Azure Portal. I go through all of the login authentication and then receive:

AADSTS500113: No reply address is registered for the application

There is another question post on here from 21-Nov-2025 where a responder suggests going to Azure App Registrations and looking for an App named Azure Bastion Native Client to see if it has a redirect URI.

I do not see any application in my app registrations called Azure Bastion Native Client. What is the Azure Bastion NAtive Client app? Is this a legit app? How does it get installed? I don't see it documented anywhere.

Microsoft Security | Microsoft Entra | Microsoft Entra ID

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Rukmini 10,825 Reputation points Microsoft External Staff Moderator
    2025-12-01T22:24:00.4766667+00:00

    Hello JohnSebastian-3934,

    This issue has been observed over multiple subscriptions. Our Engineering team has identified a fix and hopes to deploy during the deployment window in December. Tentatively setting ETA for mid-December to account for roll out across all regions.

    As per the update the issue has been fixed!

    If the resolution was helpful, kindly take a moment to accept the answer and upvote it 👍 it as a token of appreciation.

    2 people found this answer helpful.
  2. Q&A Assist
    2025-12-01T22:06:30.5966667+00:00
    AI generated content. This question contains an answer created with AI from Q&A Assist. Learn more

    The error AADSTS500113 indicates that there is no reply address registered for the application you are trying to authenticate with. In the context of Azure Bastion and Entra ID, the application you are looking for is likely related to the Bastion service that allows you to connect to your VMs using the native client.

    The Azure Bastion Native Client is not a standalone application that you install; rather, it is part of the Azure Bastion service that facilitates connections to VMs using RDP or SSH. When you use the Azure Portal to connect to a VM, the Bastion service manages the authentication process, including redirect URIs.

    If you do not see an application named "Azure Bastion Native Client" in your App Registrations, it may be due to the specific configuration of your Azure environment or the way the Bastion service is set up. You should ensure that your Azure Bastion configuration is correct and that the necessary permissions and redirect URIs are properly set up in the Azure portal.

    To resolve this issue, you may want to check the following:

    1. Ensure that the Azure Bastion service is correctly configured in your Azure environment.
    2. Verify that the redirect URIs for the Bastion service are correctly registered in the App Registrations section of Azure Active Directory.
    3. If necessary, consult the Azure documentation or support for further assistance regarding the Bastion service and its integration with Entra ID.
    0 comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.