Not able to Update the Application ID URI - Secure an MCP Server with OAuth 2.0 LAB 1.2

[dhruvp29]

In lab 1.2, getting an error while replacing Application ID URI wiht the dev tunnel URL.

Failed to update Application ID URI application property. Error detail: Values of IdentifierUris property must use a verified domain of the organization or its subdomain: https://re90fdhc-47002.asse.devtunnels.ms

[OwnOptic]

Dhruvil Prajapati (@dhruvp29) that step cannot work, so it is not your tenant. Entra only accepts an https:// Application ID URI whose host is a verified domain of your tenant or its onmicrosoft.com initial domain, and nobody can verify devtunnels.ms. The supported formats are listed here: https://learn.microsoft.com/entra/identity-platform/identifier-uri-restrictions

Leave the Application ID URI as the api://<client-id> value you accepted a few steps earlier and carry on. Nothing in the secured server reads it: the authorization policy requires the bare HR.Manage scope claim, and the RFC 9728 resource metadata URL is built from the incoming request host, so the dev tunnel is picked up on its own.

In appsettings.json, keep the Scopes value you already set from the Application ID URI (api://[YOUR_HR_MCP_SERVER_CLIENT_ID]/HR.Manage) instead of switching it to the dev tunnel URL, and use that same value later where the lab says [YOUR_DEVTUNNEL_URL]/HR.Manage.

#3208 fixes the lab text.