Adding Application proxy to Enterprise app removes ability to change claims

Question

I currently have an App registration setup using OIDC for authentication. This app reg has the automatically created Enterprise App.

If i go to Single Sign-On in the enterprise app i see this

This allows me to add and update claims.

However, if i add an application proxy to the enterprise application the Single Sign-On page changes to this:

What am i missing? I can no longer update the claims. Is this intentional? Is it not possible to setup an enterprise app to have an application proxy if the underlying app reg is using OIDC?

Answer 1

Hello @Stephen Burgess,

Thank you for posting your query on Microsoft Q&A.

I understand that when you created an application through App Registration, an application object was also created under the Enterprise Applications blade. From there, you were able to configure claims using the Single Sign-On (SSO) settings successfully.

However, when you created a Microsoft Entra Application Proxy application from the Enterprise Applications blade, the Single Sign-On configuration prompted you to "Select a single sign-on method," which prevented you from configuring claims for that App Proxy application.

Both scenarios you described are expected behavior. When you create an application through App Registration, it typically uses the OAuth or OIDC protocol, so the SSO settings will appear as shown in your first screenshot. Conversely, when you create an application directly in the Enterprise Applications blade, the SSO configuration will resemble what you see in your second screenshot.

To add claims to your proxy application, you can select the SAML method under "Select a single sign-on method." This will allow you to configure the claims for your proxy application. You can add optional claims as needed under the "Attribute & Claims" section.

I hope this information is helpful. Please feel free to reach out if you have any further questions.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Thanks,
Raja Pothuraju.