Share via

Enterprise Application Proxy is not working for SAP Business One HANA

85817493 0 Reputation points
2026-05-09T13:02:26.09+00:00

We have configured Microsoft Entra Application Proxy to provide external access to SAP Business One HANA hosted on an on-premises Linux server. The connector is operational and registered successfully, but HTTPS traffic from the connector to the backend SAP server is failing with a TLS handshake error (SSPI). Accessing the application via the external proxy URL results in HTTP 401 and HTTP 500 errors.
Environment

  • Application: SAP Business One HANA (web client)
  • Backend server: Linux, IP pii removed, port 443, internally accessible via https://sapb1/
  • Connector server: Windows Server, IP pii removed
  • Connector version: Microsoft Entra Private Network Connector v1.5.4594.0
  • Connector group: Default – North America
  • Firewall: FortiGate 60F (outbound policy configured for connector server; Microsoft Azure, Azure AD, Service Bus, and Connectors internet services allowed on HTTPS/HTTP/AMQP 5671)
  • External URL: https://sapbusinessone-azengineers.msappproxy.net
  • Internal URL: https://sapb1/
  • Pre-authentication: Passthrough
  • Backend SSL validation: Disabled
  • Translate URLs in headers: Enabled
  • Translate URLs in application body: Enabled

What is working

  • Connector service is running with no errors in the Windows Event Log
  • Connector is successfully registered and visible in the Entra portal
  • login.microsoftonline.com:443 is reachable from the connector server
  • bootstrap.msappproxy.net:443 is reachable from the connector server
  • SAP backend is reachable internally from the connector server (Test-NetConnection pii removed succeeds)
  • FortiGate packet sniffer confirms outbound traffic from pii removed is reaching servicebus.windows.net (65.55.54.16) via the WAN interface
  • SAP Web UI resources (SAP UI5/jQuery) are partially loading in the browser through the proxy URL
Microsoft Security | Microsoft Entra | Microsoft Entra Private Access

1 answer

Sort by: Most helpful
  1. 85817493 0 Reputation points
    2026-05-11T05:50:19.8133333+00:00

    Thank you Mr. Sharma,
    As per the diagnostic test, everything is working and configured correctly. But still Application proxy is not working, it is landing at login page for sap business one and after entering local credentials for sap it keeps finding the next page. User's image

    Was this answer helpful?


Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.