Azure / Azure/static-web-apps

Static Web Apps identity.7 returns 401 during Entra authentication across independent resources

Open
#1,792 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
No language data
Stars
346
Forks
67
PR merge metrics
No merged PRs in 30d

Description

With reference to the [Microsoft-confirmed identity.7 incident](https://learn.microsoft.com/en-nz/answers/questions/5860048/we-are-having-some-issues-with-the-built-in-auth-f). I am seeing a similar issue. The key evidence is:

- Original SWA and an independent Standard replacement both failed at /.auth/login/aad/callback.
- They used different regions, hostnames, Entra registrations and credentials.
- A clean Free-tier app with no SchoolFlow code also failed during built-in authentication.
- All three resources were routed through identity.7.azurestaticapps.net.
- The application never loaded, so the failure occurred before our roles source or application authorization.

Can you confirm the incident and reroute the affected SWA resources to a healthy identity backend?

Contributor guide

No contributing guide indexed for this repository

Research direction

Start with the linked Microsoft-confirmed identity.7 incident and reproduce the failure at /.auth/login/aad/callback using the reported independent Static Web Apps resources. Confirm that authentication fails before the application loads and that the affected resources are routed through identity.7.azurestaticapps.net; done means the resources authenticate successfully through a healthy identity backend.

Written by the indexing model from the issue text.

Assessment

Tech stack
azure
Domain
authentication, cloud
Issue type
Bug
Difficulty
5/5
Estimated time
Over a week
Activity status
Quiet
Clarity
Needs clarification
Newbie friendliness
20/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.