How to register an IIS service with Azure App Proxy to call it with SOAP

Question

How to register an IIS service with Azure App Proxy to call it with SOAP

이 현무 60

Each time you use a specific service in your mobile app, you need to call the service registered with Azure App Proxy.

I use MSAL on the login page at the beginning of the app to get an identity token,

I am putting this token in the Soap request header and trying to make the call.

But whenever I call it with the token in the header, the login page responds.

The two images below are the ID token and Access token returned by MSAL, respectively. Both tokens respond to the same login page when tested with Postman.

User's image

1 answer

Your answer

Answer 1

Hello @이 현무,

Thank you for posting your query on Microsoft Q&A.

Based on your description, it appears that you are trying to call a service configured with Microsoft Entra Application Proxy. You mentioned using the MSAL library to authenticate users and acquire security tokens for an application. After authentication, you successfully obtained an ID token and an Access token, which allowed you to make SOAP header requests. You also noted that these calls worked successfully when tested with Postman.

If the token you generated has the correct permissions to authorize SOAP requests, the calls will succeed with a 200 response. Since you confirmed that both the ID token and Access token worked for SOAP header requests, it is crucial to ensure that the scope parameter in your authentication request is correct. The scope parameter determines the permissions granted to access the required resources.

The context of your query is not entirely clear, as far I understood if you would to use Microsoft Entra application proxy the use case for app proxy is it enables secure remote access to on-premises web applications by configuring an Entra Application Proxy Connector on your on-premises server. This allows users to access on-premises applications from external networks without needing to connect to a VPN.

To implement the Application Proxy in your Azure tenant, you can refer to the following documentation for detailed guidance:

I hope this information is helpful. Please feel free to reach out if you have any further questions.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Thanks,
Raja Pothuraju.

이 현무 60 Reputation points

2024-12-12T08:08:20.4366667+00:00

Oh.. my problem is that 200 is returned, but not from our service, but from the MS login page as a response.
이 현무 60 Reputation points

2024-12-12T09:36:26.6933333+00:00

We want to call an iis service registered with azure app proxy from Android and iOS.

We use MSAL to get the access token and include it in the call, but when we call it, it returns the MS login page.As a result, we do not have access to the IIS services registered with the AZURE APP PROXY.

Here's what we did to set it up

publish to Azure App Proxy and register the application

register proxy application permissions (scope)

configure application platform (Android, iOS)

obtain a token using MSAL (native app)

call the IIS server using SOAP (with the Access token in the header)

For us, it looks like everything went fine up to number 4 (it worked without any errors).

However, when we proceed to number 5, we always get the MS login page.
Raja Pothuraju 43,660 Reputation points Microsoft External Staff Moderator

2024-12-19T18:29:26.7966667+00:00

Hello @이 현무,

Thank you for your response.

As you described, if you are being redirected to the Microsoft login page again even after obtaining a token, it indicates that the token does not include the required scope to access the IIS server application integrated with Azure Application Proxy.

Are you able to log in to the application using the internal URL within the corporate network? If the issue also occurs on the internal network, it suggests that the problem lies with the IIS server application itself, not with the Application Proxy.

I recommend following the steps outlined in the document below: Configure a native client application to access your on-premises application through Application Proxy

Thanks,
Raja Pothuraju.

Share via

How to register an IIS service with Azure App Proxy to call it with SOAP

1 answer

Your answer