Access cannot be granted to this service because the service listing is not properly configured by the publisher

Hi All,

I have created a cloud multi-tenant app using VS 2013. I did not change any code after VS2013 setup the application in Azure AD. it is an MVC app. I have 2 additional tenants that I created under the same Azure subscription. Here are the tenants, for example:

1. AppAd (this is where the app is registered)
2. ContosoAd
3. FabrikamAd

I then ran the application and signed up 3 times, first for AppAd, then for ContosoAd, and finally for FabrikamAd. I did that using thehttps://localhost:44300 for Sign-on Url and Reply Url. All worked - no issues. I was able to log on to the application using credential from all 3 tenants.

I then published the app to a Azure web site and changed the Sign-on Url and Reply Url to thehttps://<some name>.azurewebsites.net. At this point I could no longer log in using any credential from any tenants. The behavior is that I can sign in - but the application does not show my signed in name (username@xxx.onmicrosoft.com). It does not give me any error though.

Then I removed access from ContosoAd directory so that the app does not show up on the Applications list in the Azure portal.

I then tried to signup for the contosoad and I got the error:

----------------------------------------------------------------------------------------------

Access cannot be granted to this service because the service listing is not properly configured by the publisher.

Correlation ID:

EUS#700261d6-7a35-4fc7-8064-bf945cf8d37a 

Error code:

1028

----------------------------------------------------------------------------------------------

I can use some help at this point. What am I missing?

Thanks much.

M