question

MohammedAlom-0727 avatar image
0 Votes"
MohammedAlom-0727 asked BrjannBrekkan-4679 edited

MyApps - Publishing Externally Hosted Applications

Hello Community,

We are in the process of publishing our on premises applications on the cloud using Azure AD App Proxy. All is well so far as we have managed to register the apps and publish these.

Our management would like to publish/make available apps that are hosted externally and have an External URL in MyApps - https://myapplications.microsoft.com

Have tried just registering the app in Azure using the external URL as the homepage and making the app available for me. It tries to use the app proxy service and fails.

We don’t necessarily need it to use the app proxy but just want it available to our users as an app in one area.

Is this possible to do?


Thanks in advance,
Mo

azure-ad-app-registrationazure-ad-application-proxyazure-ad-app-development
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

vipulsparsh-MSFT avatar image
0 Votes"
vipulsparsh-MSFT answered

@MohammedAlom-0727 If you mean that you do not want internal users to be going over App proxy, you need to use the Split-Brain DNS.
A split DNS infrastructure directs internal hosts to an internal domain name server, and external hosts to an external domain name server, for name resolution.

If the internal and external URLs are different, you don't need to configure split-brain behavior, because user routing is determined by the URL. In this case, you change only the external DNS, and route the external URL to the Application Proxy endpoint. Read more here.

If at all, you need to configure the Split-brain DNS, have a look at this document : https://docs.microsoft.com/en-us/windows-server/networking/dns/deploy/split-brain-dns-deployment


5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

MohammedAlom-0727 avatar image
0 Votes"
MohammedAlom-0727 answered vipulsparsh-MSFT commented

We don't want to use the App Proxy for the app that is hosted externally. Just publish the app to an external website in My Apps.

Example: We register an app in Azure and add the homepage URL as https://www.microsoft.com/

Just want to publish the app in MyApps so users can be directed to https://www.microsoft.com/ when clicking on the app.

Hope that makes sense.


Thanks,
Mo

· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

@MohammedAlom-0727 In that case, verify that your external routing for that app does not matches with the external routing for any APP proxy path.
If everything is correct and you are still redirected to the App proxy page, I would suggest to open a support ticket to investigate it further.

0 Votes 0 ·
BrjannBrekkan-4679 avatar image
0 Votes"
BrjannBrekkan-4679 answered BrjannBrekkan-4679 edited

@MohammedAlom-0727 - I think what you are looking at is to add just a link to an external application in MyApps. You dont need to use App Proxy for this. App Proxy is really designed to enable access to an app that runs in your private network.

You can setup something called Linked application. https://docs.microsoft.com/en-us/azure/active-directory/manage-apps/configure-linked-sign-on . This option doesn't provide any SignOn help and if you want to also provide SSO capabilities you can use the Password based sign-on method. https://docs.microsoft.com/en-us/azure/active-directory/manage-apps/configure-password-single-sign-on-non-gallery-applications

If the app that you link to supports federation (SAML or OIDC) its highly recommended that you integrate the application with Azure AD by configuring the app to use Azure AD as the Identity Provider. Here is the overall Select SSO solution page: https://docs.microsoft.com/en-us/azure/active-directory/manage-apps/sso-options

/Brjann

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.