JSON Web Token (JWT) validation through Azure Front Door Auth Policy is now in public preview on Azure Front Door Premium. Validate bearer tokens issued by Microsoft Entra ID at the edge before requests reach your APIs or web applications, helping you centralize authentication checks and reduce unnecessary traffic to your origins.
Associate an Auth Policy with a profile, domain, or route, and configure the expected issuer and audience for token validation. Use Block mode to reject requests with missing or invalid tokens with an HTTP 401 Unauthorized response or evaluate requests without blocking them in Log mode. This preview focuses on validating existing bearer tokens; your application remains responsible for application-specific authorization, and origin access should be restricted to prevent clients from bypassing Azure Front Door.
Learn more.