Ory is the largest open source community in the world for cloud software application security. We maintain advanced open source security software solving authentication, authorization, access control, application network security, and delegation. Ory implements a variety of industry and best-practice standards including OAuth 2.0 / OAuth 2.1, OpenID Connect, Zero Trust Networking, Google Zanzibar Policy Framework, FIDO2 U2F, WebAuthn, TOTP, and more.

Ory Community

I’m building a custom login UI, but I’m noticing the default Ory Account Experience login UI is still accessible at /ui/login. Ideally the user should no longer be able to access that page.

Hi <@U0496BFFFL1>

You could disable this page by adding your custom domain to the project and then adding a new base URL inside the Custom UI screen.

<https://www.ory.sh/docs/kratos/bring-your-own-ui/configure-ory-to-use-your-ui>

Ory will always redirect to your custom domain if you by accident redirect the user through the project slug URL and since you have a new base URL set on the custom UI, the user will always be directed to your UI app instead of the custom domain you added to Ory - essentially disabling the Account Experience

We will also be addressing this issue in future to make it more explicit in the Ory Console.

This is just a demo project, so I don’t have a custom domain set up yet. Maybe that is the issue.

In case anyone else is reading this, there is an extra input once you set up a custom domain.