Disabling HTACCESS in Stage?
Our new AzureAD B2C authentication solution needs the the SAML metadata to be publicly accessible. The HTACCESS auth prevents this. Whitelisting IP's is a joke because AzureAD uses many large range...
Forum Discussion
Without knowing how the .htaccess rules are written, it seems to me like it would be possible to move the specific path for your SAML Metadata to the allow side of the rules. It's been a couple years since I had to do any Apache config. It might have to go in the config there, vs the actual .htaccess file.
Regardless, it's certainly possible to configure a "regular" web server to allow a specific path while still requiring basic auth everywhere else.
Edit: We use Azure B2C as well, with separate configs in Stage and Prod. I don't recall having any issues related to this when we implemented it.
