Azure Government endpoints are changing

Effective date: May 5, 2020 (Finishing June 2020) Endpoints impacted: All Protocol impacted: All flows On 1 June 2018, the official Microsoft Entra Authority for Azure Government changed from https://login-us.microsoftonline.com to https://login.microsoftonline.us. This change also applied to Microsoft 365 GCC High and DoD, which Azure Government Microsoft Entra ID also services. If you own an application within a US Government tenant, you must update your application to sign users in on the .us endpoint. On May 5, 2020, Microsoft Entra ID will begin enforcing the endpoint change, blocking government users from signing into apps hosted in US Government tenants using the public endpoint (microsoftonline.com). Impacted apps will begin seeing an error AADSTS900439 - USGClientNotSupportedOnPublicEndpoint. This error indicates that the app is attempting to sign in a US Government user on the public cloud endpoint. If your app is in a public cloud tenant and intended to support US Government users, you'll need to update your app to support them explicitly. This may require creating a new app registration in the US Government cloud. Enforcement of this change will be done using a gradual rollout based on how frequently users from the US Government cloud sign in to the application - apps signing in US Government users infrequently will see enforcement first, and apps frequently used by US Government users will be last to have enforcement applied. We expect enforcement to be complete across all apps in June 2020. For more details, please see the Azure Government blog post on this m…