Can't access the App Service Editor

Question

Hi,

I can access the web app URL directly when coming off the VPN, but 'Kudu' or the 'App Service Editor' show the error as it's not authenticated. I can't access the web app directly while on the VPN even though both IP addresses have been allowed access. On the VPN also doesn't load the web app when it's been made publicly available.

Thanks,

Evgeny

Answer 1

Evgeny, Just to highlight, Kudu (is a companion app, the engine behind a number of features in Azure App Service related to source control based deployment)

There are 2 authentication mechanisms.

• Single sign on. This is only available and a default mechanism accessing via browser. User will be authenticated via AAD login. >> When Kudu site is access/opened in the same session.
• Basic Auth using Deployment-credentials. This is default for non browser - such as curl. However, one can force this mode on browser by appending basicauth such as https://mysite.scm.azurewebsites.net/basicauth.

Kudu wiki :
“Only those with Contributor / Owner access (to be exact, with microsoft.web/sites/publish/action or, for slot, microsoft.web/sites/slots/publish/action) can access to Kudu (SCM).”

As I understand, you are unable to access the Azure Webapp url and also Kudu site and you have mentioned IPs have been allowed.

It’s possible that the VPN settings or firewall might be blocking access. You might need to check the VPN settings and make sure that the necessary ports are open.

Ref: Accessing-the-kudu-service and Kudu architecture