Understanding IKEA Business Portal Connection Resets
IKEA’s B2B supplier portal is hosted on Microsoft’s Azure cloud with Azure CDN fronting Cloudflare. The portal uses TLS 1.3 with ECH for all authenticated sessions. When suppliers access the portal from macOS Safari on networks with SSL inspection (common in the Middle East, Africa, and Southeast Asia), the ISP gateway resets the ECH-enabled ClientHello, causing the TLS handshake to fail.
Azure’s CDN configuration supports TLS 1.2 fallback, but Cloudflare’s edge policy requires ECH for TLS 1.3 and only falls back to TLS 1.2 when the client explicitly signals TLS 1.2 support. ISP gateways that strip this signal cause Cloudflare to assume TLS 1.3-only support, which fails.
Browser Integrity Sync on Azure-Cloudflare Dual Layer
IKEA’s B2B portal uses browser integrity sync across Azure’s application layer and Cloudflare’s CDN layer. When the TLS handshake is interrupted at the ISP gateway, the integrity sync fails at the Cloudflare layer, and Azure’s security layer blocks the supplier’s access.
Fixing IKEA Business Portal Connection Resets
Using Microsoft Edge Instead of Safari
Microsoft Edge’s TLS stack may negotiate TLS 1.2 fallback more effectively than Safari. Download Microsoft Edge from the official Microsoft website and access the IKEA B2B portal in Edge — if the portal loads, the issue is Safari’s TLS 1.3 enforcement specifically.
Switching DNS to Microsoft DNS
Navigate to System Settings → Network → Wi-Fi → Details → DNS. Set DNS servers to 13.107.42.14 and 13.107.43.20 (Microsoft DNS). Azure DNS resolves IKEA’s CDN endpoints to the nearest healthy edge node with the lowest latency for your location.
Using VPN with European Endpoints
IKEA’s infrastructure is most stable when accessed from Europe. Use a VPN with endpoints in Sweden (Stockholm), Germany (Frankfurt), or the Netherlands (Amsterdam) to route your traffic through European ISP infrastructure that supports TLS 1.3 with ECH.
Call to Action
Use the webs.ninja network lab to verify connectivity to IKEA’s B2B portal endpoints. The diagnostic identifies whether the reset is caused by your ISP’s gateway, a Cloudflare edge node failure, or IKEA’s Azure infrastructure, directing the fix to the correct layer.