Forum Discussion
AzureAD Application Proxy and the PATCH-verb
Hi,
we did setup an AzureAD Application Proxy to make one of our applications available from the internet.
For the outside-user, we use an MS 365-login. The proxy does then use this information to query our AD in order to get kerberos-credentials that are then used to access the application.
This is working just fine. With one exception: Each time, the client sends a request using the http-verb PATCH, the request is not coming through.
The client receives a 502 (bad gateway) and the message "This corporate app can't be accessed.". The proxy does record a warning-event in the eventlog.
In the IIS-Log of the target-application, we do see all of the user's requests, except the ones using PATCH.
Do you have any ideas on how to solve that?
Thank you very much!
We solved it:
https://docs.microsoft.com/en-us/azure/active-directory/manage-apps/application-proxy-faq
Application Proxy requires Windows Server 2012 R2 or later. There is currently a limitation on HTTP2 for Windows Server 2019. In order to successfully use the connector on Windows Server 2019, you will need to add the following registry key and restart the server: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\WinHttp\EnableDefaultHttp2 (DWORD) Value: 0
