App Services & IPv6
I noticed my spn failing conditional access for trusted locations. SignIn logs failures are only for it via IPv6 address; ULA private fde4:. IPv6 is not configured anywhere; vnet, pep, dns, ase, etc. I suspect split-tunneling is happening. User's laptop is Cisco IPv4-only to Azure VDI (:::1 ipconfig). User goes to Azure Apps redirect uri; server unavailable. SignIn logs show user auth ok, but spn failed ipv6 same time.
Som MS Learn articles mention IPv6 in App Services by backend Azure-Managed. I also use Get-DNS cmdlets and no AAAA exist in cache or redirect uri look up. Auth is oidc and there is a hardcoded uri below redirect uri. I see a couple proxy domains. Could Open-ID Connect be using IPv6 or a fail logging as a private IPv6?
Any ideas?
1 answer
Sort by: Most helpful
-
Deleted
This answer has been deleted due to a violation of our Code of Conduct. The answer was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.
Comments have been turned off. Learn more