💡 Our Technical Review in summary
Summary
- Microsoft is transitioning its first-party authenticated SaaS products to a unified, dedicated domain: cloud.microsoft.
- This specific update confirms that Microsoft Forms (https://forms.cloud.microsoft/) is now available under this new domain.
- The move is designed to enhance security by using a Microsoft-owned Top-Level Domain (TLD), which reduces the risk of spoofing and provides a more consistent user experience across the Microsoft 365 ecosystem.
- While the old and new domains currently run in parallel, Microsoft will begin automatically redirecting previous URLs to the new domain in the coming months.
Impact
- User Experience: Users will notice the change in the address bar (the lack of a “.com” extension). However, existing links to Forms will remain backward compatible through automatic redirection.
- Network Security: Because “.microsoft” is an exclusive TLD owned by Microsoft, it offers superior protection against phishing and domain-squatting compared to generic “.com” domains.
- Access: If an organization’s network filtering or firewall rules do not explicitly allow the
*.cloud.microsoftwildcard, users may lose access to Microsoft Forms and other integrated services as the transition progresses. - Integrated Apps: In-house Teams apps, Outlook add-ins, and Microsoft 365 integrations that rely on hardcoded URLs may require updates to remain functional.
Action Required
- Network Configuration: Verify that your enterprise network, firewalls, and proxy servers allow traffic to
*.cloud.microsoft. This is part of the standard Microsoft network guidance issued since April 2023. - Internal Documentation: Update internal help desk articles, bookmarks, and organizational training materials to reflect the new URL (https://forms.cloud.microsoft/).
- User Education: Inform users about the new
cloud.microsoftdomain so they are not alarmed by the URL change and do not mistake it for a phishing attempt. - Developer Coordination: Work with internal developers to ensure any custom Teams or Office applications are compatible with the new domain by following Microsoft’s technical migration guidance.
- Audit Links: Although redirects will be automatic, it is best practice to update any high-traffic links on internal portals or SharePoint sites to the new domain to minimize latency and ensure a seamless experience.
Microsoft Official Update
Service: N/A
Category: stayInformed
Severity: normal
The cloud.microsoft domain was provisioned in early 2023 to provide a unified, trusted, and dedicated DNS domain space to host Microsoft’s first-party authenticated SaaS products and experiences. This post is to inform admins that the following Microsoft products and scenarios are now available at the cloud.microsoft domain, in parallel with the previous domains.
Microsoft Forms (https://forms.cloud.microsoft/)
[When this will happen:]
The services above are already available on cloud.microsoft, in parallel to their previous domains. You can expect the previous domains to be redirected to cloud.microsoft in the coming months.
[How this will affect your organization:]
- The cloud.microsoft domain has been a part of standard Microsoft network guidance on domains and service endpoints since April 2023. If you are currently following this guidance, this change should not impact users in your organization using the above applications under the new domain.
- Users will be redirected to applications under cloud.microsoft domains gradually and automatically. No specific user action is required. Links to the previous domains are backwards compatible and continue to be supported. Users may notice that the new application domains are lacking the “.com” extension. This is by design, as “.microsoft” is Microsoft’s own top-level domain – and this exclusivity allows for additional security and protection against spoofing.
[What you need to do to prepare:]
- Educate users to recognize and expect cloud.microsoft as a key domain for Microsoft cloud experiences. You can refer them to What is cloud.microsoft? – Microsoft Support for more information.
- If your organizational websites, tools, or other materials reference the old URL, those links will be automatically redirected. However, it would be good practice to update those assets to avoid user confusion.
- Partner with developers of in-house Teams apps – including those that run on Outlook and Microsoft 365 – to take the actions described in Action required: ensure your Microsoft Teams apps are ready for upcoming domain changes so the apps continue to function on the new domain.
- Admins should ensure that connections to *.cloud.microsoft are not blocked from their clients and enterprise networks. This should require no action if standard Microsoft network guidance on domains and service endpoints is being followed.
