🌰 Quick noteJuly 13, 20251 min chase
Cloudflare SSO to Azure Static Web App
Azure SSO in Cloudflare... too good to be true?
#Cloudflare#Azure
So close! I have a project where a client needed to have users in a Microsoft Entra tenant (mostly Microsoft 365 Business Basic with a smattering of E1, and E3) use their domain logins to access a static React app. Introducing Azure Static Web App (SWA) - yay?
The Good
Mostly automagic SSO integration
The Bad
After finally getting the SWA installed, getting all of the app and permissions done, you hit the URL and get this consent nightmare:
WHY? WHY? this is my own internal app on my own internal azure tenant?!?!?
Even though this is hosted in my client’s Azure tenant and is being accessed by their internal Entra (AAD) users, Azure Static Web Apps still inserts a generic post-login notice to comply with Microsoft’s platform-wide privacy standards for GDPR/privacy consent requirements, session cookie and identity handling transparency, and data erasure options.