How to connect an on-premises application to Azure AD

Question

How to connect an on-premises application to Azure AD

InfraSolutions 711

Dear Support,

We installed and configured one of the business apps on the terminal server and provided users remote desktop access to the application.

Can the on-premises application be connected to Azure AD so that users may access it online?

I'm not sure whether the steps below meet my needs, however I started installing the connector and got stuck in the middle,

Installed the connector application "Application Proxy Connector" on the terminal server, and the application proxy's status in Azure AD is active,

User's image

I planned to integrate the on-premises application that was already installed (on-premise server) into the Azure AD using application proxy, however it requires an internal Url and segment. I'm not sure of how to get the internal Url from the installed application. Please help with this request.

Luke Murray 11,436 Reputation points MVP Volunteer Moderator

2023-03-07T20:21:00.2533333+00:00

Azure Application Proxy is more for internal web-based applications. Does this application you are running have a web frontend?
InfraSolutions 711 Reputation points

2023-03-08T09:53:14.9833333+00:00

No, it is a stand-alone application that interacts with a SQL database.
Luke Murray 11,436 Reputation points MVP Volunteer Moderator

2023-03-08T16:12:54.2033333+00:00

Azure Application Proxy isn't the right solution, as App Proxy is only for internal web apps -not binary aplications- your best bet may be to move the application into Azure Virtual Desktop.
InfraSolutions 711 Reputation points

2023-03-09T09:33:02.2366667+00:00

Thank you lukemurraynz!
Sandeep G-MSFT 20,911 Reputation points Microsoft Employee Moderator

2023-03-13T03:46:24.9866667+00:00

@InfraSolutions

Just checking in to see if the below answer helped. If this answers your query, please don’t forget to click "Accept the answer" and Up-Vote for the same, which might be beneficial to other community members reading this thread.
InfraSolutions 711 Reputation points

2023-03-15T11:56:41.8333333+00:00

Thank you for the additional information you provided in regards to my questions.

We have not purchased Azure Virtual Desktop in order to take use of its features so unable to test this scenario.
Luke Murray 11,436 Reputation points MVP Volunteer Moderator

2023-03-15T18:19:40.18+00:00
AVD is licensed under some M365 licenses:

You are eligible to access Windows 10 and Windows 7 with Azure Virtual Desktop if you have one of the following per user licenses*:

Microsoft 365 E3/E5

Microsoft 365 A3/A5/Student Use Benefits

Microsoft 365 F3

Microsoft 365 Business Premium**

Windows 10 Enterprise E3/E5

Windows 10 Education A3/A5

Windows 10 VDA per user

https://azure.microsoft.com/en-us/pricing/details/virtual-desktop/

You maybe eligible to use it already with an Azure subscription, if not then you will need to get the licenses.
InfraSolutions 711 Reputation points

2023-03-16T16:18:34.33+00:00

Our standard purchased licences are as follows,

Enterprise Mobility + Security E3 Microsoft 365

Business Standard

We also purchased ten licences "Microsoft 365 Business Premium " for testing.

Accepted answer

1 additional answer

Your answer

Luke Murray 11,436 Reputation points MVP Volunteer Moderator

2023-03-07T20:21:00.2533333+00:00

Azure Application Proxy is more for internal web-based applications. Does this application you are running have a web frontend?
InfraSolutions 711 Reputation points

2023-03-08T09:53:14.9833333+00:00

No, it is a stand-alone application that interacts with a SQL database.
Luke Murray 11,436 Reputation points MVP Volunteer Moderator

2023-03-08T16:12:54.2033333+00:00

Azure Application Proxy isn't the right solution, as App Proxy is only for internal web apps -not binary aplications- your best bet may be to move the application into Azure Virtual Desktop.
InfraSolutions 711 Reputation points

2023-03-09T09:33:02.2366667+00:00

Thank you lukemurraynz!
Sandeep G-MSFT 20,911 Reputation points Microsoft Employee Moderator

2023-03-13T03:46:24.9866667+00:00

@InfraSolutions

Just checking in to see if the below answer helped. If this answers your query, please don’t forget to click "Accept the answer" and Up-Vote for the same, which might be beneficial to other community members reading this thread.
InfraSolutions 711 Reputation points

2023-03-15T11:56:41.8333333+00:00

Thank you for the additional information you provided in regards to my questions.

We have not purchased Azure Virtual Desktop in order to take use of its features so unable to test this scenario.
Luke Murray 11,436 Reputation points MVP Volunteer Moderator

2023-03-15T18:19:40.18+00:00

AVD is licensed under some M365 licenses:

You are eligible to access Windows 10 and Windows 7 with Azure Virtual Desktop if you have one of the following per user licenses*:

Microsoft 365 E3/E5

Microsoft 365 A3/A5/Student Use Benefits

Microsoft 365 F3

Microsoft 365 Business Premium**

Windows 10 Enterprise E3/E5

Windows 10 Education A3/A5

Windows 10 VDA per user

https://azure.microsoft.com/en-us/pricing/details/virtual-desktop/

You maybe eligible to use it already with an Azure subscription, if not then you will need to get the licenses.
InfraSolutions 711 Reputation points

2023-03-16T16:18:34.33+00:00

Our standard purchased licences are as follows,

Enterprise Mobility + Security E3 Microsoft 365

Business Standard

We also purchased ten licences "Microsoft 365 Business Premium " for testing.

Answer 1

Sandeep G-MSFT 20,911 Microsoft Employee Moderator

@InfraSolutions

If you want to connect to your application from Azure AD then you will have to make one of the application URL which should be web base.

If you are trying to connect to any on-premise application which doesn't have any public facing URL then it is not possible to access the application.

Let me know if you have any further questions

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

Answer 2

Hello @MJ

Thank you for your reaching. I would like to inform you that Application Proxy is recommended for giving remote users access to internal resources. Application Proxy replaces the need for a VPN or reverse proxy. It is not intended for internal users on the corporate network. For more details review following article: What is Application Proxy?

With regards to your ask about what is Internal URL please find explanation below as mentioned on following document: Add an on-premises app to Azure AD

The URL for accessing the application from inside your private network. You can provide a specific path on the backend server to publish, while the rest of the server is unpublished. In this way, you can publish different sites on the same server as different apps, and give each one its own name and access rules.

If you publish a path, make sure that it includes all the necessary images, scripts, and style sheets for your application. For example, if your app is at https://yourapp/app and uses images located at https://yourapp/media, then you should publish https://yourapp/ as the path. This internal URL doesn't have to be the landing page your users see. For more information, see Set a custom home page for published apps.

To get complete details about Azure AD Application Proxy please find below videos which might help:

What is Application Proxy in Azure Active Directory?

How to deploy Application Proxy in Azure Active Directory

How to integrate applications with Azure Active Directory

How to roll out Application Proxy in Azure Active Directory

I hope this answer helps to resolve your issue.

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

InfraSolutions 711 Reputation points

2023-03-15T12:00:39.0866667+00:00

Thank you for explaining about this topic - Application proxy and how to generate the proxy URL.

We are unable to generate the URL from our business application since it is a standalone software that uses a SQL database.

Share via

How to connect an on-premises application to Azure AD

1 additional answer

Your answer