MicrosoftThis is a great article and please don't take this the wrong way but about time Microsoft! I had opened a few tickets on it maybe in late 2022 and we essentially figured this out in-house via combination of managed exclusions and custom rules via Azure WAF logs, triage workbook, fiddler and trial/error. This is definitely a great well written article. The 2 new items I can take away from this is the reference to use DRS ruleset (we haven't tried - will need to test since it mentions it may solve some of the false positives and also the redirect URI option for the Azure B2C apps.
On the DRS ruleset.. does this work with Azure WAF Triage workbook and is there a github page listing the rules similar to the OWASP ruleset? Thanks!
