Off-Prem

SaaS

Microsoft tackles SaaSy URL sprawl, dumping its dotcom in favor of cloud.microsoft

Promises more cross-product links, better security, and easier admin – for you and Redmond’s own crew


Microsoft has admitted its panoply of 365-branded products have sprawled across an uncomfortably large quantity of inconsistently named URLs, so the software giant has started to consolidate them all at cloud.microsoft.

"As Microsoft cloud services have grown over the years, the domain space they live on has grown as well – into the hundreds," states a Wednesday post from Redmond. "Over time, this fragmentation has created increasing challenges for end user navigation, administrative simplicity, and the development of cross-app experiences."

It's also meant the admins of the Microsoft.com domain have a lot of juggling to do as they try to secure the bits of that domain dedicated to SaaS and others that offer less sensitive content or services.

Redmond's response is to give its 365 services a consistent URL structure: [productname].cloud.microsoft. That decision means users will be able to access products at URLs such as outlook.cloud.microsoft or teams.cloud.microsoft, while status pages will be offered at status.cloud.microsoft.

The consistent URLs are more than a branding exercise. The post points out that the new arrangements are more intuitive, and mean admins only have to put one domain – cloud.microsoft – onto their allow-lists.

Microsoft's own admins will enjoy the change. "Keeping SaaS experiences isolated in their own domain space establishes a clean security boundary for our compliant authenticated experiences," the post observes. "There are also anti-spoofing and integrity benefits to hosting such experiences on an exclusive, purposefully-managed TLD like .microsoft vs a generic TLD like .com."

The scheme will one day expand beyond Microsoft 365. The Windows giant's post presages "We will share plans for other services in the future."

The document also teases "better and tighter integration across the Microsoft 365 ecosystem by streamlining development and improving performance of cross-app experiences."

We can't wait. Especially if they manage to stay up, unlike Microsoft 360-something and falling.

Another reason for the shift to cloud.microsoft is to distinguish SaaS services from the e-commerce and content centric Microsoft.com domain.

The simplified URL scheme isn't live yet and will first be used for new services. Once Microsoft starts to move other services to its SaaSy domain, it will offer at least 30 days' notice.

It won't solve all of Microsoft's URL sprawl problems, though: in 2021 we reported a community-led effort to consolidate 179 admin portals at msportals.io. At the time of writing the list has grown to 220 portals. ®

Send us news
23 Comments

Microsoft issues deadline for end of Windows 10 support – it's pay to play for security

Limited options will be available into 2028, for an undisclosed price

Attacks abuse Microsoft DHCP to spoof DNS records and steal secrets

Akamai says it reported the flaws to Microsoft. Redmond shrugged

Fancy Bear goes phishing in US, European high-value networks

GRU-linked crew going after our code warns Microsoft - Outlook not good

AWS accuses Microsoft of clipping customers' cloud freedoms

World's biggest off-prem service slinger submits comments to UK cloud inquiry, mostly has Redmond HQ's rival in its sights

Microsoft to intro dedicated mode for Cloud PCs

Latest Insider Build brings new features for Windows 365 Boot

Google submits complaints about Microsoft licensing to UK competition regulator

Now Microsoft has regulator breathing down its neck in three regions

Another month, another bunch of fixes for Microsoft security bugs exploited in the wild

Plus: VMware closes critical hole, Adobe fixes a whopping 76 flaws

Microsoft's bug bounty turns 10. Are these kinds of rewards making code more secure?

Katie Moussouris, who pioneered Redmond's program, says folks are focusing on the wrong thing

How to give Windows Hello the finger and login as someone on their stolen laptop

Not that we're encouraging anyone to defeat this fingerprint authentication

Five Eyes nations warn Moscow's mates at the Star Blizzard gang have new phishing targets

The Russians are coming! Err, they've already infiltrated UK, US inboxes

Experienced Copilot help is hard to find, warns Microsoft MVP

Almost nobody has used it, or knows it well, so beware of consultants bearing cred

Microsoft's relationship with OpenAI now in competition regulator's sights

Has recent CEO, board shenanigans given rise to a merger situation? CMA is asking for a friend