Hi 👋, We're working on an Ory Network project with a custom domain `https://auth.identity.abc.com`(placeholder). We've configured allowed CORS origins as

<https://auth.identity.abc.com>

and

https://*.<http://abc.com|abc.com>

. Our custom UI is hosted at

<https://identity.abc.com>

(e.g.,

<https://identity.abc.com/login>

,

<https://identity.abc.com/recovery>

, etc.), and we've set the necessary custom UI paths in our Ory project configuration. We have also ensured that "Enable the account experience welcome page" is turned OFF. We're observing that direct navigation to paths on our Ory custom domain like

<https://auth.identity.abc.com/login>

,

<https://auth.identity.abc.com/recovery>

, etc., results in a 404 error:

{
  "error": {
    "code": "404",
    "details": {
      "ruleId": "6176b3cb"
    },
    "message": "Invalid path",
    "reason": "No resource found using the specified path.",
    "status": "Not Found"
  }
}

Interestingly, users with a valid session can access

<https://auth.identity.abc.com/settings>

and see the default Ory account experience settings page. Our goal is to have all user-facing identity pages served exclusively from our custom UI domain (

<https://identity.abc.com>

). Could you please advise on how can we completely disable access to the Ory-hosted

/settings

page at

<https://auth.identity.abc.com/settings>

, ensuring users are always directed to our custom UI for account management? Have we potentially missed a configuration setting to achieve this behavior? Thanks for your help!

Did you set the UI URL for the settings flow here: https://console.ory.sh/projects/current/ui?

Yes, to

<https://identity.abc.com/settings>

, following the same pattern

IIUC you don't want users to be able to use that URL?

we want users to only be able to go to https://identity.abc.com/settings They should never see the (Ory) account experience /settings page

If there is no flow ID in the URL /settings of the Ory Account Experience will redirect to your defined UI URL. Can you DM me the URLs of your project so that I can reproduce it?

Sent in a DM