When configuring Azure AD as the authentication provider (with redirect/callback URIs pointing at a hostname like `test888.example.com`), does that hostname need to be registered in public DNS, or is a local/internal DNS entry sufficient?

All FAQ questions / Security and access

Answer

A public DNS record isn't required — a local (internal) DNS entry resolving that hostname is sufficient, because Azure AD itself never contacts the application's URLs directly. Azure only instructs the client's browser to redirect to the callback URL, passing along the access token it issued; it's the client browser, not Azure, that then needs to resolve and reach that hostname, which is why local DNS resolution (visible to whatever machines/browsers will actually be logging in) is what matters, not public registration.

Documentation-based answer. Confirm the product and release before applying it. This answer has not been verified in an IFS environment.

← Browse Security and access questions