Affected Components

■ A standard UMP-365 installation on a single Windows VM: IIS, SQL Server instance SQLSYSADMIN and RabbitMQ, all this VM
■ Azure Application Gateway with WAF v2. Other WAFs and reverse proxies (Azure Front Door, F5, FortiWeb, NGINX) work in the same manner; the settings below have an equivalent on each.
■ A  public DNS name for UMP-365, referred to in this chapter as ump.example.com
■ UMP-365 web applications installed under IIS Default Web Site.
IIS path Application Who uses it

/tenantui

UMP-365 web application (SysAdmin.TenantWeb)

Service provider and customer administrators.

/authenticate

Customer Portal (UMP.CustomerPortalNg)

End customers, for onboarding and consent.

/SysAdmin_<tenant>

Per-tenant application (full install only)

Administrators of the tenant.