0

I have created an Azure B2C and we have a few user flows. These user flows use the default domain of b2cinstance.b2clogin.com. This domain doesn't go through a WAF so I decided to create an Azure Front Door with WAF Policy to set up a custom domain for my Azure B2C instance.

I have set this all up and it is working as expected. We now have the domain login.mywebsite.com, which forwards to origin b2cinstance.b2clogin.com. for our user flows which is working as expected and can see the requests in the Azure Front Door.

My question if I try to use the domain b2cinstance.b2clogin.com, the user flow still works. How do I restrict use of this domain

Improve this question

1 Answer 1

Reset to default
0

You need to put in place a custom Azure B2C policy to block access to the original domain

https://learn.microsoft.com/en-us/azure/active-directory-b2c/custom-domain?pivots=b2c-custom-policy#optional-block-access-to-the-default-domain-name

Improve this answer

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.