Off-Prem

SaaS

Microsoft tackles SaaSy URL sprawl, dumping its dotcom in favor of cloud.microsoft

Promises more cross-product links, better security, and easier admin – for you and Redmond’s own crew


Microsoft has admitted its panoply of 365-branded products have sprawled across an uncomfortably large quantity of inconsistently named URLs, so the software giant has started to consolidate them all at cloud.microsoft.

"As Microsoft cloud services have grown over the years, the domain space they live on has grown as well – into the hundreds," states a Wednesday post from Redmond. "Over time, this fragmentation has created increasing challenges for end user navigation, administrative simplicity, and the development of cross-app experiences."

It's also meant the admins of the Microsoft.com domain have a lot of juggling to do as they try to secure the bits of that domain dedicated to SaaS and others that offer less sensitive content or services.

Redmond's response is to give its 365 services a consistent URL structure: [productname].cloud.microsoft. That decision means users will be able to access products at URLs such as outlook.cloud.microsoft or teams.cloud.microsoft, while status pages will be offered at status.cloud.microsoft.

The consistent URLs are more than a branding exercise. The post points out that the new arrangements are more intuitive, and mean admins only have to put one domain – cloud.microsoft – onto their allow-lists.

Microsoft's own admins will enjoy the change. "Keeping SaaS experiences isolated in their own domain space establishes a clean security boundary for our compliant authenticated experiences," the post observes. "There are also anti-spoofing and integrity benefits to hosting such experiences on an exclusive, purposefully-managed TLD like .microsoft vs a generic TLD like .com."

The scheme will one day expand beyond Microsoft 365. The Windows giant's post presages "We will share plans for other services in the future."

The document also teases "better and tighter integration across the Microsoft 365 ecosystem by streamlining development and improving performance of cross-app experiences."

We can't wait. Especially if they manage to stay up, unlike Microsoft 360-something and falling.

Another reason for the shift to cloud.microsoft is to distinguish SaaS services from the e-commerce and content centric Microsoft.com domain.

The simplified URL scheme isn't live yet and will first be used for new services. Once Microsoft starts to move other services to its SaaSy domain, it will offer at least 30 days' notice.

It won't solve all of Microsoft's URL sprawl problems, though: in 2021 we reported a community-led effort to consolidate 179 admin portals at msportals.io. At the time of writing the list has grown to 220 portals. ®

Send us news
23 Comments

Microsoft tests 45% M365 price hikes in Asia-Pacific to see how much you enjoy AI

Won’t say if other nations will be hit, but will ‘listen, learn, and improve’ as buyers react – so far with anger

Microsoft eggheads say AI can never be made secure – after testing Redmond's own products

If you want a picture of the future, imagine your infosec team stamping on software forever

Microsoft sues 'foreign-based' cyber-crooks, seizes sites used to abuse AI

Scumbags stole API keys, then started a hacking-as-a-service biz, it is claimed

Russia's Star Blizzard phishing crew caught targeting WhatsApp accounts

FSB cyberspies venture into a new app for espionage, Microsoft says

The unlicensed OneDrive free ride ends this month

Kind old Microsoft is worried about security and compliance ... nothing to do with a free storage loophole

How Windows got to version 3 – an illustrated history

With added manga and snark. What's not to like?

Where does Microsoft's NPU obsession leave Nvidia's AI PC ambitions?

While Microsoft pushes AI PC experiences, Nvidia is busy wooing developers

Microsoft fixes under-attack privilege-escalation holes in Hyper-V

Plus: Excel hell, angst for Adobe fans, and life's too Snort for Cisco

Biden signs sweeping cybersecurity order, just in time for Trump to gut it

Ransomware, AI, secure software, digital IDs – there's something for everyone in the presidential directive

Copilot invades Microsoft 365 Personal and Family for an extra three bucks a month

Many users less than impressed by unexpected arrival of AI assistant in Word

GoDaddy slapped with wet lettuce for years of lax security and 'several major breaches'

Watchdog alleged it had no SIEM or MFA, orders rapid adoption of basic infosec tools

Windows Patch Tuesday hits snag with Citrix software, workarounds published

Microsoft starts 2025 as it hopefully doesn't mean to go on