High severityauthentication
Power BI Error:
AADSTS50029
What does this error mean?
The redirect URI or resource URI sent to Microsoft Entra ID (Azure AD) contains characters that violate URI syntax rules.
Common causes
- 1Redirect URI in the App Registration contains invalid characters (spaces, underscores in hostname, unencoded special chars, or trailing whitespace)
- 2Custom domain added to the tenant uses characters not allowed by RFC 3986 (e.g. underscores in the hostname label)
- 3Reply URL configured with a non-ASCII / IDN domain that wasn't punycode-encoded
- 4Copy-paste of the redirect URI introduced hidden whitespace, smart quotes, or zero-width characters
- 5Resource identifier (App ID URI) was registered with an invalid scheme or malformed host
How to fix it
- 1Open Microsoft Entra admin center → App registrations → your app → Authentication, and inspect every Redirect URI for spaces, underscores in the hostname, or non-ASCII characters
- 2Re-enter suspect URIs by typing them manually (don't paste) to remove hidden whitespace or smart quotes, and ensure the scheme is https://
- 3If you use a custom verified domain, go to Entra ID → Custom domain names and confirm the domain is RFC 3986-compliant; convert IDN domains to punycode (xn--...)
- 4Check the App ID URI / Application ID URI under Expose an API — it must be a valid URI (api://{client-id} or https://{verified-domain}/{path})
- 5After correcting, wait 1-2 minutes for propagation and retry the sign-in or Power BI dataset refresh authentication flow