MIP Sensitivity Labels on GCC-High

[Nick27188053awkk]

I'm trying to setup Microsoft sensitivity labeling in Acrobat 2025.001.20531 64bit. And I keep getting this error during authentication.

AADSTS50011: The redirect URI 'acrobat2021.oauth2://miplogin' specified in the request does not match the redirect URIs configured for the application '97bd680b-f203-4917-a342-308a3de4094a'. Make sure the redirect URI sent in the request matches one added to your application in the Azure portal.

I have followed the instructions on https://helpx.adobe.com/enterprise/kb/mpip-support-acrobat.html?linkId=100000367294403 And have tried toggling the bMIPExternalAuthAdmin registry key between 1 and 0 as well with no success.

Seems like Azure Enterprise Application 97bd680b-f203-4917-a342-308a3de4094a (Adobe Acrobat) in Azure Government must have the redirect URL 'acrobat2021.oauth2://miplogin' added. 

Chat support was no help, so posting here.  Thanks!!

[creative explorer]

@Nick27188053awkk Even though you're using Acrobat 2025, it appears the application is still requesting an older redirect URI (likely a legacy one from Acrobat 2021) for its authentication flow, and your Azure AD tenant for Adobe Acrobat (identified by the application ID 97bd680b-f203-4917-a342-308a3de4094a) doesn't recognize it. The bMIPExternalAuthAdmin registry key toggles different authentication methods, but it won't magically add a missing redirect URI to your Azure AD configuration. To resolve this, the solution lies squarely within your Azure Active Directory (AAD) portal, specifically within the Enterprise Application associated with Adobe Acrobat (ID 97bd680b-f203-4917-a342-308a3de4094a). You, or your Azure AD administrator, must log into the Azure portal, navigate to that specific Enterprise Application, and add acrobat2021.oauth2://miplogin as a valid "Redirect URI" for that application's authentication configuration. This tells Azure AD that it's safe to send authentication responses back to that specific URI when Acrobat initiates a login request. Once this URI is added and saved in Azure, Acrobat's authentication should succeed.

[Nick27188053awkk]

Thanks for your reply. Unfortunately, the Enterprise application is owned by Adobe, not my tenant, so even as a global admin I do not have the privilege to change the redirect URL of the application. 

An application administrator from Adobe must modify that redirect URL. 

[creative explorer]

@Nick27188053awkk have you contacted your dedicated Adobe Enterprise Support 'person'?

[tyler_6353]

I can confirm that we have a case open about this with Microsoft and Adobe and it is still a problem

[tyler_6353]

In case anyone else encounters this, Adobe did acknowledge there is a bug. The case is:
ADB-40740782-W4P2

The bug ID is:
ADC-4508485

[Nick27188053awkk]

Sorry for the slow reply.  Yes I have contacted Adobe support multiple times and none of the outsourced customer service people from India who answered had ANY idea what an Azure Enterprise Application was and ABSOLUTLY REFUSED to escalate the issue to the engineering team or anyone who could possibly be helpful. 
Our account manager stopped replying when I brought up this issue....  

[AnandSri]

Hello @Nick27188053awkk

I hope you are doing well and apologize for the trouble.

Are you still experiencing this issue? The bug mentioned above has been fixed in the July update. 

I will get this checked internally and share an update. I am also sharing more information via email. Please check your email inbox, the email you used to log in to the community.

Thanks for your cooperation.

Anand Sri.

[Nick27188053awkk]

Hell @AnandSri ,
I just installed the most recent version of Acrobat, 25.1.20630

And am still experiencing the EXACT same issue.
You say this was fixed in a July update, however I cannot find any mention of this "bug" in any of the release notes.

[AnandSri]

Hello @Nick27188053awkk

I hope you are doing well. Thanks for sharing the details. I have requested the Enterprise Team contact you. Also, if possible, please submit a support ticket using the Enterprise Console.

Thanks,

Anand Sri.

[AnandSri]

Hello @Nick27188053awkk

I hope you are doing well. I have requested some information via email. I have sent you an email to the Adobe ID (email) that you have used to log in to the community. Please check your email inbox and share the information.

Thanks,

Anand Sri.

[Nick27188053awkk]

Replied to the email with the requested info... Again

[AnandSri]

Received, thank you. 

have requested the team to get in touch with you as soon as possible.

~Anand Sri.

[connie_3424]

I am also still running into this issue. Has there been a fix?

[Nick27188053awkk]

There has not been a fix because Adobe refuses to take responsibility for this issue. They keep trying to blame microsoft or tell me to "update the redirect url" myself, which is not possible since Adobe OWNS the azure application.  There will not be a resolution until someone takes this seriously and quits asking for worthless logs and screenshots.  The ONLY way for Adobe to fix this is to add the new redirect url to the azure application, but they are too ignorant, and prefer to blame the consumer.

[AnandSri]

Hello @Nick27188053awkk

I hope you are doing well, and sorry for the trouble.

I will check with the team for the status, and the enterprise team will contact you for further assistance.

Thanks for your cooperation.

Regards,

Anand Sri.

[Sigma352866318vva]

I can confirm this is still an issue for us in M365 GCCH still. Adobe closed the but I referenced earlier and said its 'fixed' in the latest release but nothing works still.

[Nick27188053awkk]

The only response I need from the enterprise team is confirmation that they have added "acrobat2021.oauth2://miplogin"  as a redirect URL on the Azure Government enterprise application Adobe Acrobat  (ID 97bd680b-f203-4917-a342-308a3de4094a), resolving this debocle. 

[AnandSri]

Sure, I will share the info with the Enterprise team to get this updated.

Thanks,

Anand Sri.