News: 1682577013

  ARM Give a man a fire and he's warm for a day, but set fire to him and he's warm for the rest of his life (Terry Pratchett, Jingo)

Microsoft tackles SaaSy URL sprawl, dumping its dotcom in favor of cloud.microsoft

(2023/04/27)


Microsoft has admitted its panoply of 365-branded products have sprawled across an uncomfortably large quantity of inconsistently named URLs, so the software giant has started to consolidate them all at cloud.microsoft.

"As Microsoft cloud services have grown over the years, the domain space they live on has grown as well – into the hundreds," states a [1]Wednesday post from Redmond. "Over time, this fragmentation has created increasing challenges for end user navigation, administrative simplicity, and the development of cross-app experiences."

It's also meant the admins of the Microsoft.com domain have a lot of juggling to do as they try to secure the bits of that domain dedicated to SaaS and others that offer less sensitive content or services.

[2]

Redmond's response is to give its 365 services a consistent URL structure: [productname].cloud.microsoft. That decision means users will be able to access products at URLs such as outlook.cloud.microsoft or teams.cloud.microsoft, while status pages will be offered at status.cloud.microsoft.

[3]

[4]

The consistent URLs are more than a branding exercise. The post points out that the new arrangements are more intuitive, and mean admins only have to put one domain – cloud.microsoft – onto their allow-lists.

Microsoft's own admins will enjoy the change. "Keeping SaaS experiences isolated in their own domain space establishes a clean security boundary for our compliant authenticated experiences," the post observes. "There are also anti-spoofing and integrity benefits to hosting such experiences on an exclusive, purposefully-managed TLD like .microsoft vs a generic TLD like .com."

[5]

The scheme will one day expand beyond Microsoft 365. The Windows giant's post presages "We will share plans for other services in the future."

The document also teases "better and tighter integration across the Microsoft 365 ecosystem by streamlining development and improving performance of cross-app experiences."

We can't wait. Especially if they manage to stay up, unlike [6]Microsoft 360-something and falling .

[7]Microsoft may stop bundling Teams with Office amid antitrust probe threat

[8]Microsoft stumps loyal fans by making OneDrive handle Outlook attachments

[9]China somehow got through COVID without MS Teams but – phew! – it's arrived

[10]Microsoft uses carrot and stick with Exchange Online admins

Another reason for the shift to cloud.microsoft is to distinguish SaaS services from the e-commerce and content centric Microsoft.com domain.

The simplified URL scheme isn't live yet and will first be used for new services. Once Microsoft starts to move other services to its SaaSy domain, it will offer at least 30 days' notice.

[11]

It won't solve all of Microsoft's URL sprawl problems, though: in 2021 we [12]reported a community-led effort to consolidate 179 admin portals at [13]msportals.io . At the time of writing the list has grown to 220 portals. ®

Get our [14]Tech Resources



[1] https://techcommunity.microsoft.com/t5/microsoft-365-blog/introducing-cloud-microsoft-a-unified-domain-for-microsoft-365/ba-p/3804961

[2] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_offprem/saas&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2ZEpHwag8JChjewQ@u69N1AAAAFg&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0

[3] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_offprem/saas&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44ZEpHwag8JChjewQ@u69N1AAAAFg&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0

[4] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_offprem/saas&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33ZEpHwag8JChjewQ@u69N1AAAAFg&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0

[5] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_offprem/saas&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44ZEpHwag8JChjewQ@u69N1AAAAFg&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0

[6] https://www.theregister.com/2023/04/24/microsoft_365_search_outage/

[7] https://www.theregister.com/2023/04/25/microsoft_teams_office_bundling/

[8] https://www.theregister.com/2023/04/06/microsoft_outlook_onedrive_storage/

[9] https://www.theregister.com/2023/04/03/microsoft_teams_come_to_china/

[10] https://www.theregister.com/2023/03/30/microsoft_hardening_exchange_online/

[11] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_offprem/saas&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33ZEpHwag8JChjewQ@u69N1AAAAFg&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0

[12] https://www.theregister.com/2021/02/04/179_microsoft_admin_portals_listed_at_msportals_io/

[13] https://msportals.io/

[14] https://whitepapers.theregister.com/



OhForF'

I hope they include things like aspnetcdn.com and anything else that currently needs scripts enabled to log in to their cloud services.

In the long run this might help but short term it will cause all kinds of issues when switching over to their new main domain *.cloud.microsoft - another golden opportunity for hackers.

Why could they not be bothered to set up everything they need as subdomains of microsoft.com in the first place?

katrinab

Or use a .net address? Isn’t that what they are supposed to be used for?

gryphon

And all the authentication URL's.

Try and log into anything in 365 and it's bouncing around all over the place in the background with many different public certs as well.

J.Teodor

You know it is bad when all admins have https://msportals.io/ as a home page...

What is a "cross-app experience"?

Andy E

Have I had one? Do I need one?

Re: What is a "cross-app experience"?

cookieMonster

Any of their current offerings.

Tell me you haven’t been “cross” with any of them!!

Re: What is a "cross-app experience"?

Anonymous Coward

Current ???

methionylglutaminylarginyltyrosylglutamylserylleucylphenylalanylalanylglutamin-
ylleucyllysylglutamylarginyllysylglutamylglycylalanylphenylalanylvalylprolyl-
phenylalanylvalylthreonylleucylglycylaspartylprolylglycylisoleucylglutamylglu-
taminylserylleucyllysylisoleucylaspartylthreonylleucylisoleucylglutamylalanyl-
glycylalanylaspartylalanylleucylglutamylleucylglycylisoleucylprolylphenylala-
nylserylaspartylprolylleucylalanylaspartylglycylprolylthreonylisoleucylgluta-
minylasparaginylalanylthreonylleucylarginylalanylphenylalanylalanylalanylgly-
cylvalylthreonylprolylalanylglutaminylcysteinylphenylalanylglutamylmethionyl-
leucylalanylleucylisoleucylarginylglutaminyllysylhistidylprolylthreonylisoleu-
cylprolylisoleucylglycylleucylleucylmethionyltyrosylalanylasparaginylleucylva-
lylphenylalanylasparaginyllysylglycylisoleucylaspartylglutamylphenylalanyltyro-
sylalanylglutaminylcysteinylglutamyllysylvalylglycylvalylaspartylserylvalylleu-
cylvalylalanylaspartylvalylprolylvalylglutaminylglutamylserylalanylprolylphe-
nylalanylarginylglutaminylalanylalanylleucylarginylhistidylasparaginylvalylala-
nylprolylisoleucylphenylalanylisoleucylcysteinylprolylprolylaspartylalanylas-
partylaspartylaspartylleucylleucylarginylglutaminylisoleucylalanylseryltyrosyl-
glycylarginylglycyltyrosylthreonyltyrosylleucylleucylserylarginylalanylglycyl-
valylthreonylglycylalanylglutamylasparaginylarginylalanylalanylleucylprolylleu-
cylasparaginylhistidylleucylvalylalanyllysylleucyllysylglutamyltyrosylasparagi-
nylalanylalanylprolylprolylleucylglutaminylglycylphenylalanylglycylisoleucylse-
rylalanylprolylaspartylglutaminylvalyllysylalanylalanylisoleucylaspartylalanyl-
glycylalanylalanylglycylalanylisoleucylserylglycylserylalanylisoleucylvalylly-
sylisoleucylisoleucylglutamylglutaminylhistidylasparaginylisoleucylglutamylpro-
lylglutamyllysylmethionylleucylalanylalanylleucyllysylvalylphenylalanylvalyl-
glutaminylprolylmethionyllysylalanylalanylthreonylarginylserine, n.:
The chemical name for tryptophan synthetase A protein, a
1,913-letter enzyme with 267 amino acids.
-- Mrs. Byrne's Dictionary of Unusual, Obscure, and
Preposterous Words