diff --git a/src/components/Settings.tsx b/src/components/Settings.tsx
index cafeba1..fd48d80 100644
--- a/src/components/Settings.tsx
+++ b/src/components/Settings.tsx
@@ -355,6 +355,19 @@ export default function Settings({ currentUser: _currentUser }: SettingsProps) {
               onToggleShow={() => setShowAzureSecret(v => !v)}
             />
           </FieldRow>
+          <div className="sm:col-span-2">
+            <FieldRow
+              label="Redirect URI"
+              hint="Must match exactly what is registered in Azure Portal → App registrations → Authentication. Leave blank to auto-derive from APP_URL."
+            >
+              <Input
+                value={azureRedirectUri}
+                onChange={setAzureRedirectUri}
+                placeholder={effectiveRedirectUri || 'https://…/api/auth/azure/callback'}
+                monospace
+              />
+            </FieldRow>
+          </div>
           <FieldRow
             label="Allowed Group"
             hint="Object ID of an Azure AD group. If set, only members of this group can sign in."
diff --git a/src/vite-env.d.ts b/src/vite-env.d.ts
new file mode 100644
index 0000000..11f02fe
--- /dev/null
+++ b/src/vite-env.d.ts
@@ -0,0 +1 @@
+/// <reference types="vite/client" />