App Services & IPv6

James Clayton 1 Reputation point
2024-09-07T13:20:30.83+00:00

I noticed my spn failing conditional access for trusted locations. SignIn logs failures are only for it via IPv6 address; ULA private fde4:. IPv6 is not configured anywhere; vnet, pep, dns, ase, etc. I suspect split-tunneling is happening. User's laptop is Cisco IPv4-only to Azure VDI (:::1 ipconfig). User goes to Azure Apps redirect uri; server unavailable. SignIn logs show user auth ok, but spn failed ipv6 same time.

Som MS Learn articles mention IPv6 in App Services by backend Azure-Managed. I also use Get-DNS cmdlets and no AAAA exist in cache or redirect uri look up. Auth is oidc and there is a hardcoded uri below redirect uri. I see a couple proxy domains. Could Open-ID Connect be using IPv6 or a fail logging as a private IPv6?

Any ideas?

Azure App Service
Azure App Service
Azure App Service is a service used to create and deploy scalable, mission-critical web apps.
7,902 questions
{count} votes

1 answer

Sort by: Most helpful
  1. Deleted

    This answer has been deleted due to a violation of our Code of Conduct. The answer was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.


    Comments have been turned off. Learn more

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.