We are using B2C as our identity server, and a Pen Test has noted the b2login.com endpoint accepts TLSv1.0 and TLSv1.1. Our company policy is to use TLSv1.2. Can I configure the TLS level (and cipher) on .b2clogin.com
1 Answers
As per this document, Microsoft Azure recommends all customers complete migration towards solutions that support transport layer security (TLS) 1.2 and to make sure that TLS 1.2 is used by default.
Currently one cannot configure b2clogin.com to accept only TLS 1.2, Microsoft controls it.
Related