Azure Front Door provides enhanced performance, security, and global load balancing. In this setup, Content Management (CM) and Sitecore Identity (SI) services sit behind Azure Front Door, ensuring secure authentication and optimized traffic routing.
Below the steps to configure a custom domain, with Azure Front Door.
Custom Domain CM: https://cm.maykon.online/
Custom Domain Identity:https://si.maykon.online/
Sitecore Configuration:
CM:
File: Sitecore.Owin.Authentication.IdentityServer.config
Location: /wwwroot/App_Config/Sitecore/Owin.Authentication.IdentityServer/Sitecore.Owin.Authentication.IdentityServer.config
Add this line (Adjust based on your domain):
<setting name="FederatedAuthentication.IdentityServer.CallbackAuthority" value="https://cm.maykon.online" />
Add this (your SI domain, which should be configured in Azure Front Door). In my case, I have a custom domain name: si.maykon.online.
<sc.variable name="identityServerAuthority" value="https://si.maykon.online" />
SI:
File:Sitecore.IdentityServer.Host.xml
Location: /wwwroot/Config/production/Sitecore.IdentityServer.Host.xml
Configure Password recovery:
<PasswordRecoveryUrl>https://cm.maykon.online/sitecore/login?rc=1</PasswordRecoveryUrl>
Add the Cors:
<AllowedCorsOriginsGroup1>https://cm.maykon.online</AllowedCorsOriginsGroup1>
--
File: identityServer.xml
Location: Sitecore.Plugin.IdentityServer/Config/identityServer.xml
Add
<PublicOrigin>https://si.maykon.online</PublicOrigin>
Azure Front Door:
Remove the Origin host header from your origin group ( CM origin ):
In the Web App CM, add the custom domain.
Add the custom domain name at the Web App level; this is required for the Web App to respond to requests.