MIP Sensitivity Labels on GCC-High

[Nick27188053awkk]

I'm trying to setup Microsoft sensitivity labeling in Acrobat 2025.001.20531 64bit. And I keep getting this error during authentication.

AADSTS50011: The redirect URI 'acrobat2021.oauth2://miplogin' specified in the request does not match the redirect URIs configured for the application '97bd680b-f203-4917-a342-308a3de4094a'. Make sure the redirect URI sent in the request matches one added to your application in the Azure portal.

I have followed the instructions on https://helpx.adobe.com/enterprise/kb/mpip-support-acrobat.html?linkId=100000367294403 And have tried toggling the bMIPExternalAuthAdmin registry key between 1 and 0 as well with no success.

Seems like Azure Enterprise Application 97bd680b-f203-4917-a342-308a3de4094a (Adobe Acrobat) in Azure Government must have the redirect URL 'acrobat2021.oauth2://miplogin' added. 

Chat support was no help, so posting here.  Thanks!!

[creative explorer]

@Nick27188053awkk Even though you're using Acrobat 2025, it appears the application is still requesting an older redirect URI (likely a legacy one from Acrobat 2021) for its authentication flow, and your Azure AD tenant for Adobe Acrobat (identified by the application ID 97bd680b-f203-4917-a342-308a3de4094a) doesn't recognize it. The bMIPExternalAuthAdmin registry key toggles different authentication methods, but it won't magically add a missing redirect URI to your Azure AD configuration. To resolve this, the solution lies squarely within your Azure Active Directory (AAD) portal, specifically within the Enterprise Application associated with Adobe Acrobat (ID 97bd680b-f203-4917-a342-308a3de4094a). You, or your Azure AD administrator, must log into the Azure portal, navigate to that specific Enterprise Application, and add acrobat2021.oauth2://miplogin as a valid "Redirect URI" for that application's authentication configuration. This tells Azure AD that it's safe to send authentication responses back to that specific URI when Acrobat initiates a login request. Once this URI is added and saved in Azure, Acrobat's authentication should succeed.

[Nick27188053awkk]

Thanks for your reply. Unfortunately, the Enterprise application is owned by Adobe, not my tenant, so even as a global admin I do not have the privilege to change the redirect URL of the application. 

An application administrator from Adobe must modify that redirect URL. 

[creative explorer]

@Nick27188053awkk have you contacted your dedicated Adobe Enterprise Support 'person'?