App service easy inbuilt authentication did not always promote due to Front door cache in azure

Question

App service easy inbuilt authentication did not always promote due to Front door cache in azure

Gongada Bhanu 0

We are using Frontdoor Classic setup and app service built-in authentication in our setup. When we access the website, we are sometimes not promoted to sign in due to frontdoor cache (we have tried in all different browsers and incognite). If I clear the frontdoor cache, it immediately prompts for sign in authentication.

We are experiencing latency issues if I disable the cache in the routing rules.

So, could you please tell us about all of the possible solutions to such scenarios? We want our website to prompt for sign-in authentication every time it is opened.

attaching few related screenshots
User's image

User's image

GitaraniSharma-MSFT 50,021 Reputation points Microsoft Employee Moderator

2023-11-29T10:40:09.5666667+00:00

@Gongada Bhanu , Just checking in to see if you had a chance to see the below answer. To help the community find the right answers, please do mark the post which was helpful by clicking on Accept Answer.

And, if you have any further questions do let us know.
GitaraniSharma-MSFT 50,021 Reputation points Microsoft Employee Moderator

2023-12-01T14:11:02.5566667+00:00

@Gongada Bhanu , Just checking in to see if you had a chance to see the below answer. To help the community find the right answers, please do mark the post which was helpful by clicking on Accept Answer.

And, if you have any further questions do let us know.

1 answer

Your answer

GitaraniSharma-MSFT 50,021 Reputation points Microsoft Employee Moderator

2023-11-29T10:40:09.5666667+00:00

@Gongada Bhanu , Just checking in to see if you had a chance to see the below answer. To help the community find the right answers, please do mark the post which was helpful by clicking on Accept Answer.

And, if you have any further questions do let us know.
GitaraniSharma-MSFT 50,021 Reputation points Microsoft Employee Moderator

2023-12-01T14:11:02.5566667+00:00

@Gongada Bhanu , Just checking in to see if you had a chance to see the below answer. To help the community find the right answers, please do mark the post which was helpful by clicking on Accept Answer.

And, if you have any further questions do let us know.

Answer 1

GitaraniSharma-MSFT 50,021 Microsoft Employee Moderator

Hello @Gongada Bhanu ,

Welcome to Microsoft Q&A Platform. Thank you for reaching out & hope you are doing well.

I understand that you are using Azure Front Door Classic with App service built-in authentication and when accessing the website, sometimes you are not prompted to sign in due to Front Door cache, but it works if you clear the Front Door cache. You cannot disable the cache in the Front Door routing rules, as this is causing latency issues. So, you would like to know the possible solutions to such scenario.

You can find all the recommended considerations when using Azure Front Door with App service authentication in the below doc:

https://learn.microsoft.com/en-us/azure/app-service/overview-authentication-authorization#considerations-when-using-azure-front-door

To make sure your website prompts for sign-in authentication every time it is opened, you should disable Caching for the authentication workflow:

See Disable cache for auth workflow to learn more on how to configure rules in Azure Front Door to disable caching for authentication and authorization-related pages.

Refer: https://learn.microsoft.com/en-us/azure/app-service/overview-authentication-authorization

https://azure.github.io/AppService/2021/03/26/Secure-resilient-site-with-custom-domain.html

Kindly let us know if the above helps or you need further assistance on this issue.

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

Gongada Bhanu 0 Reputation points

2023-12-07T08:21:47.1166667+00:00

Thanks for your response.
I configured the ruleset, i.e., disabled cache for auth requests and added routing rules in frontdoor, but we can still access the site without being prompted to sign in.

Are there any other possibilities?
GitaraniSharma-MSFT 50,021 Reputation points Microsoft Employee Moderator

2023-12-08T06:26:15.4533333+00:00

Hello @Gongada Bhanu ,

Could you please let me know what is the URL you see in your browser when the sign-in prompt doesn't show up?

Are you getting redirected to the Azure App service URL?

Are you using custom domains in Azure Front Door and your App service?

Refer: https://learn.microsoft.com/en-us/azure/architecture/best-practices/host-name-preservation#incorrect-redirect-urls

Regards,

Gita
GitaraniSharma-MSFT 50,021 Reputation points Microsoft Employee Moderator

2023-12-11T09:52:06.76+00:00

Hello @Gongada Bhanu , could you please share the requested details?

Share via

App service easy inbuilt authentication did not always promote due to Front door cache in azure

1 answer

Your answer