A developer built a mobile app that acquires Azure AD access tokens using the OAuth 2.0 implicit grant flow. The app must be registered in Azure AD. The developer asks you what value is required for registration. Is the original statement that you require a redirect URI correct?

Yes, a redirect URI is required for an Azure AD app registration using the OAuth 2.0 implicit grant flow. The implicit flow returns tokens directly to the client, and the redirect URI specifies where Azure AD should send the user's browser after authentication. Without it, Azure AD wouldn't know where to send the tokens, making the authentication process incomplete and insecure. A secret is not used with the implicit flow as tokens are returned directly to the client, not a confidential server. A login hint is an optional parameter to pre-fill the username, not a registration requirement. A client ID is automatically generated upon app registration and identifies the application, but it's not a value you provide for registration in the same way a redirect URI is.