Forum Discussion
Access On Premise Apps Using Entra Identity
Yes, you can still access your on-premise applications using Microsoft Entra ID, even after switching to Microsoft 365 with a new domain. Here are a few ways to make it work:
- Entra Application Proxy
This lets you publish on-prem apps to the internet securely. Users sign in with Entra ID, and you can set up single sign-on (SSO) if needed. - Hybrid Identity with Entra Connect
If you sync your on-prem AD to Entra ID (using tools like Entra Connect), users can keep using their old credentials, and apps continue to work. Even if your primary email domain changes, you can still keep the old domain in the background for compatibility. - Keep the Old Domain in AD
As long as the old domain still exists in your local AD and is synced or trusted, users can still access apps tied to it. You can add both domains to Entra ID if needed.
In short, as long as the identity behind the apps is still valid (even if the domain changed), and you set up syncing or a proxy, your access should work.
- Entra Application Proxy
Will you have synchronization between your on-prem AD and your Entra tenant?
How are you planning to access the apps? Are you using App proxy or GSA?
Hi Sebastian,
No, because I will use the new domain in Entra/Microsoft 365.
Actually, I don't know yet, maybe you have suggestions if the user account will later use a new domain on Entra and access to the Application on On premise (old domain).
If you add the new domain to your on-prem and add it as a suffix to your users, you’d be able to sync the identities sot hat they’d be hybrid.
you can then use either entra application proxy, or better yet, Global Secure Access Private Access for access to your on-prem resources using their hybrid identities
https://learn.microsoft.com/en-us/microsoft-365/enterprise/prepare-a-non-routable-domain-for-directory-synchronization?view=o365-worldwide#add-upn-suffixes-and-update-your-users-to-them
