Q:

AzureAD authentication only works on local

Ive set up my AzureAD in the portal, and an appservice that uses the AD to authenticate following instructions from microsoft. 
Ive made a .net core app that uses this authorisation. It works on my localhost. But when i publish it i get this error 
AADSTS50011: The reply url specified in the request does not match the reply urls configured for the application: '614f66a9-xxxx-483a-8bc7-xxxxxxx'
What should i change and how come it works in my local but not when published? 
This is current configuration of app:
 {
  "AzureAd": {
    "Instance": "https://login.microsoftonline.com/",
    "Domain": "lmyName.onmicrosoft.com",
    "TenantId": "******-ebd5-40d8-829b-*********",
    "ClientId": "*****-8eef-483a-8bc7-********",
    "CallbackPath": "/signin-oidc"
  },
  "Logging": {
    "IncludeScopes": false,
    "LogLevel": {
      "Default": "Warning"
    }
  }
}

When i followed the online intructions i was directed to configure the appservice in the portal to use reply URL: /.auth/login/aad/callback 
Could that be the same as callbackPath?

A:

For your case, you can change your reply URL in AAD Application to be <YourApplicaitonURL>/signin-oidc.
NOTE The base address in the Sign-on URL and Logout URL settings is http://localhost:port. 
This localhost address allows the sample app to run insecurely from your local system. Port is the default port for the Kestrel server. Update the reply URL in your AAD Application if you configure the app for production use(If you publish your App to Azure Web App service). 
For example,  https://yourapp.azurewebsites.net/signin-oidc or https://www.contoso.com/signout-oidc
You can also refer to this Sample to Integrate Azure AD into an ASP.NET Core web app.
Please let me know if it helps!

