Hello, perhaps someone can give examples of what you mean by these settings? Unfortunately I didn't find anything. https://learn.microsoft.com/en-us/entra/identity/app-proxy/how-to-configure-sso-with-kcd#working-with-different-on-premises-and-cloud-identities The problem is that on-prem ADDS uses the contoso.local domain and I would not want to add a UPN. EntraID uses contoso.com. I need to make Application Proxy match not the UPN, but only the “login” part of it. Everything works if the same UPN is used, but I would like to use only the username, without the domain. Thank you.

Application proxy: different on-premises and cloud identities

Mountain Pond 1,716

Hello, perhaps someone can give examples of what you mean by these settings?

Unfortunately I didn't find anything.

https://learn.microsoft.com/en-us/entra/identity/app-proxy/how-to-configure-sso-with-kcd#working-with-different-on-premises-and-cloud-identities

User's image

The problem is that on-prem ADDS uses the contoso.local domain and I would not want to add a UPN. EntraID uses contoso.com. I need to make Application Proxy match not the UPN, but only the “login” part of it.

Everything works if the same UPN is used, but I would like to use only the username, without the domain.

Thank you.

Marilee Turscak-MSFT 37,396 Reputation points Microsoft Employee Moderator

2024-05-23T23:29:25.43+00:00

If I'm understanding your question correctly, it's expected behavior to have the domain added and you wouldn't be able to just use the username without the domain.

Share via

Application proxy: different on-premises and cloud identities

Your answer