Adding branded URLs to authentication with Microsoft Entra External ID Custom URL Domains

Table of Contents
What are custom URL domains?
- Custom URL domains allow users to replace default Microsoft authentication domain endpoints with their own brand names, providing a personalized domain endpoint for their application's sign-in experience.
- This customization helps reflect a brand or business identity, such as Contoso Ltd. using their domain instead of Microsoft's default authentication endpoint.
- Staying on the same domain during sign-in helps mitigate the impact of third-party cookie blocking, as many browsers block cross-domain cookies on requests to domains different from the one in the browser's address bar.
How custom URLs work
- Configure custom URL domains in the Microsoft Entra Admin Center under: Settings > Domain names > Custom URL domains.
- Add your custom domain name and complete the verification process by adding the required TXT details in your DNS settings.
- Enable the verified domain to use it as a custom URL domain.
- To implement custom URL domains, configure Azure Front Door as a reverse proxy and add your custom URL domain in that instance.
- Refer to the documentation for detailed configuration guides on setting up custom URL domains with Microsoft Entra External ID.
Let’s stay connected
- Visit the Microsoft Entra developer center to learn more or test out features of the product.
- Follow Microsoft Entra on YouTube for video overviews, tutorials, and deep dives to stay informed about the latest updates and capabilities.
Your feedback is valuable to us, so please share your thoughts on this new Custom URL Domains feature for Microsoft Entra External ID.