title: AAD reply url is flagged by WAF in Azure
body: <p>I have enabled the Web Application Firewall in the Azure FrontDoor with the default policy with the detection mode.
  In the logs generated by the WAF, we can see the firewall is marking the reply url set in AAD with action as Block. </p>
  
  <p><a href="https://i.stack.imgur.com/itmQE.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/itmQE.png" alt="enter image description here"></a></p>
  
  <p>I believe the firewall is detecting this as threat. 
  Since the url is required for the working of AD authentication, what can be done to ensure the security ? 
  Or this can be ignored ?</p>