The best way to Configure Microsoft Entra Software Proxy?

Introduction

Azure Software Proxy is a service in Microsoft Azure that allows distant entry to purposes from any machine with an internet browser without having a VPN. It offers safe entry to on-premises purposes by proxying requests via the Azure cloud.

On this article, I’ll clarify how Software proxy service works.

How does the Software Proxy work?

Stipulations

• Azure Entra ID Tenant
• Azure Entra ID Premium 1 or 2
• Software Administrator Function
• Home windows Server should do the registry edit.

Key Advantages

• Safe Distant Entry
• Single Signal-On (SSO)
• No VPN Requirement
• Pre-Authentication and Authorization
• Hybrid Deployment Assist
• Value-effective answer

Step 1. Login to the Azure Portal

Step 2. Navigate to Azure Entra ID Listing > Software Proxy

Notice. Allow Software Proxy if not already enabled.

Set up and configure the App Proxy connector on the Proxy Server

Step 1. Navigate to Software Proxy and obtain the service.

Step 2. Set up Connector on an on-premises server.

Step 3. Register together with your Microsoft Entra ID account throughout set up.

Step 4. Within the Software Proxy, click on Add a brand new software.

Step 5. You’ll be able to present your most well-liked title, which, in my case, is Webapp.

Step 6. Navigate to “Microsoft Entra ID” > “Enterprise purposes.” You’ll be able to see the registered software.

Step 7. Navigate to “Enterprise Software” > “Software Proxy” > “Properties” and replica the “Homepage URL” to entry the applying externally.

Step 8. In that software, navigate to Customers and Group and add present customers who wish to entry your software utilizing Entra ID Credential.

Step 9. Add your particular customers right here.

Testing and Validate the Software steps.

Step 1. I can entry my software from my on-premises community utilizing https://localhost or an IP Deal with.

Step 2. After implementing the Azure App Proxy answer, we will seamlessly entry the applying utilizing Microsoft Entra ID for id entry.

Notice. Open a brand new browser on any machine and browse the copied URL from the homepage.

Step 3. It should request your id enter when you have added the consumer to the applying group. For instance, my consumer. Enter your Username and Password. Hit Signal-in

Step 4. My software is operational with a safe HTTPS connection and doesn’t require VPN connectivity to entry my software from exterior.

Conclusion

This text taught us methods to securely expose on-premises purposes on Azure. If in case you have any questions, don’t hesitate to contact me.