brk-multihub URIs are not accepted as SPA redirect uris

[barclayadam]

Community Note

• Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritise this request
• Please do not leave "+1" or "me too" comments, they generate extra noise for issue followers and do not help prioritise the request
• If you are interested in working on this issue or have submitted a pull request, please leave a comment

Affected Resource(s)

• azuread_application

Terraform Configuration Files

I use Pulumi which uses v3.0.2 of the Terraform provider. The configuration I'm attempting to use in TypeScript is below:

import * as azuread from '@pulumi/azuread';

new azure.Application('app', {
    displayName: 'Test',

    singlePageApplication: {
        redirectUris: [
            // Required for Outlook Add-In NAA
            pulumi.interpolate`brk-multihub://my-add-in-domain.com`,
        ],
    },
});

Debug Output

Expected Behavior

brk-multihub should be an allowed scheme for singlePageApplication.redirectUris, with a domain-only that needs no trailing slash

Actual Behavior

Without a trailing slash:

azuread:index/application:Application resource 'main-application' has a problem: URI must have a trailing slash when there is no path segment for "single_page_application.0.redirect_uris.0". Examine values at 'main-application.singlePageApplication.redirectUris)

or, with the trailing slash:

azuread:index/application:Application resource 'main-application' has a problem: unexpected URI scheme for "single_page_application.0.redirect_uris.0", expected one of: http, https, ms-appx-web. Examine values at 'main-application.singlePageApplication.redirectUris'.

References

• pulumi-azuread#1686
• https://learn.microsoft.com/en-gb/office/dev/add-ins/develop/enable-nested-app-authentication-in-your-add-in