App service easy inbuilt authentication did not always promote due to Front door cache in azure

Gongada Bhanu 0 Reputation points
2023-11-27T09:26:24.77+00:00

We are using Frontdoor Classic setup and app service built-in authentication in our setup. When we access the website, we are sometimes not promoted to sign in due to frontdoor cache (we have tried in all different browsers and incognite). If I clear the frontdoor cache, it immediately prompts for sign in authentication.

We are experiencing latency issues if I disable the cache in the routing rules.

So, could you please tell us about all of the possible solutions to such scenarios? We want our website to prompt for sign-in authentication every time it is opened.

attaching few related screenshots
User's image

User's image

Azure Front Door
Azure Front Door
An Azure service that provides a cloud content delivery network with threat protection.
627 questions
Azure App Service
Azure App Service
Azure App Service is a service used to create and deploy scalable, mission-critical web apps.
7,372 questions
{count} votes

1 answer

Sort by: Most helpful
  1. GitaraniSharma-MSFT 49,391 Reputation points Microsoft Employee
    2023-11-27T10:26:51.2666667+00:00

    Hello @Gongada Bhanu ,

    Welcome to Microsoft Q&A Platform. Thank you for reaching out & hope you are doing well.

    I understand that you are using Azure Front Door Classic with App service built-in authentication and when accessing the website, sometimes you are not prompted to sign in due to Front Door cache, but it works if you clear the Front Door cache. You cannot disable the cache in the Front Door routing rules, as this is causing latency issues. So, you would like to know the possible solutions to such scenario.

    You can find all the recommended considerations when using Azure Front Door with App service authentication in the below doc:

    https://learn.microsoft.com/en-us/azure/app-service/overview-authentication-authorization#considerations-when-using-azure-front-door

    To make sure your website prompts for sign-in authentication every time it is opened, you should disable Caching for the authentication workflow:

    See Disable cache for auth workflow to learn more on how to configure rules in Azure Front Door to disable caching for authentication and authorization-related pages.

    Refer: https://learn.microsoft.com/en-us/azure/app-service/overview-authentication-authorization

    https://azure.github.io/AppService/2021/03/26/Secure-resilient-site-with-custom-domain.html

    Kindly let us know if the above helps or you need further assistance on this issue.


    Please "Accept the answer" if the information helped you. This will help us and others in the community as well.