Off-Prem

SaaS

Microsoft tackles SaaSy URL sprawl, dumping its dotcom in favor of cloud.microsoft

Promises more cross-product links, better security, and easier admin – for you and Redmond’s own crew


Microsoft has admitted its panoply of 365-branded products have sprawled across an uncomfortably large quantity of inconsistently named URLs, so the software giant has started to consolidate them all at cloud.microsoft.

"As Microsoft cloud services have grown over the years, the domain space they live on has grown as well – into the hundreds," states a Wednesday post from Redmond. "Over time, this fragmentation has created increasing challenges for end user navigation, administrative simplicity, and the development of cross-app experiences."

It's also meant the admins of the Microsoft.com domain have a lot of juggling to do as they try to secure the bits of that domain dedicated to SaaS and others that offer less sensitive content or services.

Redmond's response is to give its 365 services a consistent URL structure: [productname].cloud.microsoft. That decision means users will be able to access products at URLs such as outlook.cloud.microsoft or teams.cloud.microsoft, while status pages will be offered at status.cloud.microsoft.

The consistent URLs are more than a branding exercise. The post points out that the new arrangements are more intuitive, and mean admins only have to put one domain – cloud.microsoft – onto their allow-lists.

Microsoft's own admins will enjoy the change. "Keeping SaaS experiences isolated in their own domain space establishes a clean security boundary for our compliant authenticated experiences," the post observes. "There are also anti-spoofing and integrity benefits to hosting such experiences on an exclusive, purposefully-managed TLD like .microsoft vs a generic TLD like .com."

The scheme will one day expand beyond Microsoft 365. The Windows giant's post presages "We will share plans for other services in the future."

The document also teases "better and tighter integration across the Microsoft 365 ecosystem by streamlining development and improving performance of cross-app experiences."

We can't wait. Especially if they manage to stay up, unlike Microsoft 360-something and falling.

Another reason for the shift to cloud.microsoft is to distinguish SaaS services from the e-commerce and content centric Microsoft.com domain.

The simplified URL scheme isn't live yet and will first be used for new services. Once Microsoft starts to move other services to its SaaSy domain, it will offer at least 30 days' notice.

It won't solve all of Microsoft's URL sprawl problems, though: in 2021 we reported a community-led effort to consolidate 179 admin portals at msportals.io. At the time of writing the list has grown to 220 portals. ®

Send us news
23 Comments

Critical Windows licensing bugs – plus two others under attack – top Patch Tuesday

Citrix, SAP also deserve your attention – because miscreants are already thinking about Exploit Wednesday

Big Tech's eventual response to my LLM-crasher bug report was dire

Fixes have been made, it appears, but disclosure or discussion is invisible

Microsoft answered Congress' questions on security. Now the White House needs to act

Business as usual needs a real change

Microsoft hits snooze again on security certificate renewal

Seeing weird warnings in Microsoft 365 and Office Online? That'll be why

Microsoft 365's Chinese host uses just four percent renewable energy: Greenpeace

Red clouds are in no rush to go green

'Skeleton Key' attack unlocks the worst of AI, says Microsoft

Simple jailbreak prompt can bypass safety guardrails on major models

Google: We're still working to defeat Microsoft's 'anticompetitive' cloud policy

Yesterday's settlement between MS and Euro cloud providers shouldn't 'fool' you, says Alphabet arm's cloud boss

Microsoft avoids formal antitrust EC probe over abusive licensing claims by settling case with CISPE

Pays 'lump sum,' setting up new Azure Stack for hosters and more but some concerned about the private deal

CISA director: US is 'not afraid' to shout about Big Tech's security failings

Jen Easterly hopes CSRB's Microsoft report won't impede future private sector collaboration

Microsoft exits OpenAI's boardroom to sidestep regulatory scrutiny

Redmond 'confident in the company's direction' says withdrawal letter

Microsoft China staff can't log on with an Android, so Redmond buys them iThings

Google's absence creates software distribution issues not even mighty Microsoft can handle

Coders' Copilot code-copying copyright claims crumble against GitHub, Microsoft

A few devs versus the powerful forces of Redmond – who did you think was going to win?