valid MSFT or Azure websites

Mahoney, Glenn AG:EX 25 Reputation points
2026-07-17T22:56:36.23+00:00

is "login.win" a valid MSFT/Azure website, that enterprise should permit outbound access to?

Microsoft Security | Microsoft Entra | Microsoft Entra Internet Access
0 comments
Answer accepted by question author

AI answer

2026-07-17T22:56:46.3933333+00:00

No.

The documented Microsoft authentication endpoints include login.microsoft.com, login.microsoftonline.com, and login.live.com. The provided Microsoft and Azure endpoint allowlists do not include login.win.

For enterprise outbound allow rules, permit the documented Microsoft sign-in endpoints and related authentication/CDN endpoints required by the specific service being used, rather than login.win.

References:

AI-generated content may be incorrect. Read our transparency notes for more information.

Was this answer helpful?

1 person found this answer helpful.

0 additional answers

Sort by: Most helpful
Most helpful Newest Oldest

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.