This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(0, 51%, 10%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJC%3C/text%3E%3C/svg%3E)
I am wondering if any one has setup Azure AD application proxy with Integrated Windows Authentication ?
I worked with a client to set it up with Exchange OWA, and it was working until this weekend. This morning the client told me it stop working, now it shows
Azure AD Application Proxy
Status code: BadGateway
Weird part is I setup a POC for the client and it was working before, now it got same BadGateway error. Since the two application proxy are in different Azure AD tenant/different domain, that seems indicate there might be something wrong with Azure AD?
Application Proxy Connector session log shows:
Web Application Proxy encountered an unexpected error while processing the request.
Error: The logon attempt failed
(0x8009030c)
Details:
Transaction ID: {00000000-0000-0000-0000-000000000000}
Session ID: {00000000-0000-0000-0000-000000000000}
Published Application Name:
Published Application ID:
Published Application External URL: https://owa.xxx.ca/owa/
Published Backend URL: https://mail.xxx.ca/owa/
User: xxx@X .ca
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Edg/95.0.1020.53
Device ID: <Not Applicable>
Token State: NotFound
Cookie State: NotFound
Client Request URL: https://owa.xxx.ca/owa
Backend Request URL: <Not Applicable>
Preauthentication Flow: PassThrough
Backend Server Authentication Mode: WIA
State Machine State: OuOfOrderFEHeadersWriting
Response Code to Client: 500
Response Message to Client: Internal Server Error
Client Certificate Issuer: <Not Found>
Something I am not sure is it shows "Preauthentication Flow: PassThrough", but the application is configured as "Azure AD Authentication":
I tried to delete the enterprise application and recreate it, still got same error.
OK opened a support ticket and got response from Microsoft:
https://learn.microsoft.com/en-us/windows/release-health/status-windows-10-1809-and-windows-server-2019#2748msgdesc
looks like a hotfix caused this and we will need to install another hotfix to fix it.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(83.2, 9%, 18%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EFO%3C/text%3E%3C/svg%3E)
Found it. Update fixed the issue.
With our SharePoint / ProjectServer we needed to change alternate access mappings in central administration.
The app proxy url (the public one) was set to extranet. This worked before but now we got "something went wrong"
We removed the mapping and re-created it but set the zone to Internet instead of Extranet.
ULS LOG:
DelegateControl: Exception thrown while building custom control 'Microsoft.SharePoint.SPControlElement': Microsoft.SharePoint.WebPartPages.WebPartPageUserException: This page has encountered a critical error. Contact your system administrator if this problem persists.
at Microsoft.SharePoint.ApplicationRuntime.SafeControls.IsSafeControl(Boolean isAppWeb, String virtualPath)
at Microsoft.SharePoint.SPControlElement.ValidControlAttributes(String sControlAssembly, String sControlClass, String sControlSrc, SPWeb web)
at Microsoft.SharePoint.SPControlElement.BuildCustomControl(TemplateControl tctlPage, SPWeb web, String sControlAssembly, String sControlClass, String sControlSrc, XmlNode xnElementDefinition, SPFeatureDefinition featdefElement, String sElementId)
at Microsoft.SharePoint.SPControlElement.BuildCustomControl(TemplateControl tctlPage, SPWeb web)
at Microsoft.SharePoint.WebControls.DelegateControl.BuildCustomControlResilient(SPControlElement ctlelemDefinition, SPWeb web)