A cloud-based identity and access management service for securing user authentication and resource access
The B2C login host not resolving indicates a DNS or endpoint issue in front of the B2C tenant, not a user-flow configuration problem.
Perform these checks in order:
- Verify the hostname really fails in DNS
- From a machine outside the network, run a DNS lookup (for example,
nslookup B2CAlphaAcedamyOU.b2clogin.com). - If the lookup fails with an error like “host name could not be resolved in DNS,” it confirms a DNS resolution problem.
- The documented guidance for this symptom is to verify that the required DNS records exist and are correct; if not, they must be recreated or fixed in the authoritative DNS zone.
- From a machine outside the network, run a DNS lookup (for example,
- Check for custom domain / Front Door issues
- If a custom domain or Azure Front Door is used in front of B2C, misconfiguration can cause 404 or “resource not found” errors when accessing user flows.
- Confirm that:
- Any custom domain used with B2C is still registered and successfully verified in the B2C tenant.
- The CNAME for the custom domain still points to the correct Azure Front Door frontend host.
- If the custom domain is misconfigured or removed, testing the flow from the portal can also fail.
- Validate that the B2C custom domain is not in a failed state
- If a custom domain is configured for B2C and Azure Front Door, verify:
- The default route in Azure Front Door is enabled.
- The custom domain verification in the B2C tenant shows as successfully verified.
- Misconfigured or disabled routes or unverified domains can cause errors when accessing user flows.
- If a custom domain is configured for B2C and Azure Front Door, verify:
- Use a generic DNS troubleshooting approach
- If DNS resolution still fails:
- Use
nslookup(or an equivalent tool) to confirm whether any A or CNAME records exist for the hostname. - If no records exist, the DNS host record must be recreated in the authoritative DNS zone (or the service that previously owned the name may have been removed).
- Use
- If DNS resolution still fails:
If DNS for the b2clogin.com host has stopped resolving and there is no control over that DNS zone (for example, if the underlying B2C tenant or its configuration was deleted or changed), the only remediation is to restore or recreate the correct DNS/endpoint configuration or use a working B2C tenant/host name.
References: