MyApps - Publishing Externally Hosted Applications

Question

Hello Community,

We are in the process of publishing our on premises applications on the cloud using Azure AD App Proxy. All is well so far as we have managed to register the apps and publish these.

Our management would like to publish/make available apps that are hosted externally and have an External URL in MyApps - https://myapplications.microsoft.com

Have tried just registering the app in Azure using the external URL as the homepage and making the app available for me. It tries to use the app proxy service and fails.

We don’t necessarily need it to use the app proxy but just want it available to our users as an app in one area.

Is this possible to do?

Thanks in advance,
Mo

Answer 1

@Mohammed Alom If you mean that you do not want internal users to be going over App proxy, you need to use the Split-Brain DNS.
A split DNS infrastructure directs internal hosts to an internal domain name server, and external hosts to an external domain name server, for name resolution.

If the internal and external URLs are different, you don't need to configure split-brain behavior, because user routing is determined by the URL. In this case, you change only the external DNS, and route the external URL to the Application Proxy endpoint. Read more here.

If at all, you need to configure the Split-brain DNS, have a look at this document : https://learn.microsoft.com/en-us/windows-server/networking/dns/deploy/split-brain-dns-deployment

Answer 2

We don't want to use the App Proxy for the app that is hosted externally. Just publish the app to an external website in My Apps.

Example: We register an app in Azure and add the homepage URL as https://www.microsoft.com/

Just want to publish the app in MyApps so users can be directed to https://www.microsoft.com/ when clicking on the app.

Hope that makes sense.

Thanks,
Mo

Answer 3

@Mohammed Alom - I think what you are looking at is to add just a link to an external application in MyApps. You dont need to use App Proxy for this. App Proxy is really designed to enable access to an app that runs in your private network.

You can setup something called Linked application. https://learn.microsoft.com/en-us/azure/active-directory/manage-apps/configure-linked-sign-on . This option doesn't provide any SignOn help and if you want to also provide SSO capabilities you can use the Password based sign-on method. https://learn.microsoft.com/en-us/azure/active-directory/manage-apps/configure-password-single-sign-on-non-gallery-applications

If the app that you link to supports federation (SAML or OIDC) its highly recommended that you integrate the application with Azure AD by configuring the app to use Azure AD as the Identity Provider. Here is the overall Select SSO solution page: https://learn.microsoft.com/en-us/azure/active-directory/manage-apps/sso-options

/Brjann