2-WAY SSL Authentication with Azure AD Application Proxy

Question

Is it possible to configure two-way SSL authentication with certificates with Azure AD Application Proxy? This is my client's cyber security requirement.

Answer 1

Hello @Kifayathulla Kammur ,

Thanks for reaching out.

Unfortunately, no Azure AD application proxy only supports One-way SSL / Server Certificate Authentication for establishing secure and encrypted connection. However, If you choose to use Azure Active Directory preauthentication, then only authenticated connections can access your network. Azure AD Application Proxy relies on the Azure AD security token service (STS) for all authentication. Preauthentication, by its very nature, blocks a significant number of anonymous attacks, because only authenticated identities can access the back-end application.

There more security benefits when using Azure AD application proxy such as Conditional Access, Traffic termination and Cloud-scale analytics and machine learning etc.., To learn more, refer to Security considerations for accessing apps remotely with Azure Active Directory Application Proxy. Hope this helps.

-----
Please "Accept the answer" if the information helped you. This will help us and others in the community as well.