Home

Use Azure Application Proxy with an App Service

%3CLINGO-SUB%20id%3D%22lingo-sub-299659%22%20slang%3D%22en-US%22%3EUse%20Azure%20Application%20Proxy%20with%20an%20App%20Service%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-299659%22%20slang%3D%22en-US%22%3E%3CP%3EWe%20want%20to%20use%20the%20AAP%20to%20communicate%20from%20an%20Azure%20App%20service%20to%20an%20onpremise%20application.%20We%20want%20the%20authenticate%20the%20application%20not%20the%20user.%20We%20are%20able%20to%20call%20the%20api%20from%20the%20application%2C%20but%20we%20get%20an%20errorpage%20(imho%20from%20the%20proxy%20api)%20saying%20%22This%20corporate%20app%20can't%20be%20accessed%20right%20now.%22%2C%20with%20StatusCode%3A%20InternalServerError.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ECalling%20the%20proxy%20url%20from%20an%20browser%20and%20Azure%20Authentication%20on%20the%20proxy%2C%20and%20with%26nbsp%3Ban%20Azure%20Account%20logged%20in%2C%20it%20works.%3C%2FP%3E%3CP%3E%3CSPAN%3ECalling%20the%20proxy%20url%20from%20an%20browser%20with%20Passthrough%20on%20the%20proxy%2C%20anonymously%2C%20it%20works.%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%3CSPAN%3ECalling%20the%20proxy%20url%20from%20an%20browser%20with%20Azure%20Authentication%20on%20the%20proxy%2C%20anonymously%2C%20it%20return%20access%20denied.%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%3ECalling%20the%20proxy%20url%20from%20an%20Web%20Api%20hosted%20on%20Azure%20with%20a%20token%20requested%20on%20the%20Proxy%20resources%20and%26nbsp%3Bwith%26nbsp%3BAzure%20Authentication%20on%20the%20proxy%2C%20it%20fails%20with%20InternalServerError.%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%3EIs%20the%20AAP%20only%20working%20for%20use%20with%20Users%20and%20not%20Applications%3F%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-299659%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAzure%20AD%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E
EelcoMulder
Occasional Visitor

We want to use the AAP to communicate from an Azure App service to an onpremise application. We want the authenticate the application not the user. We are able to call the api from the application, but we get an errorpage (imho from the proxy api) saying "This corporate app can't be accessed right now.", with StatusCode: InternalServerError. 

 

Calling the proxy url from an browser and Azure Authentication on the proxy, and with an Azure Account logged in, it works.

Calling the proxy url from an browser with Passthrough on the proxy, anonymously, it works.

Calling the proxy url from an browser with Azure Authentication on the proxy, anonymously, it return access denied.

 

Calling the proxy url from an Web Api hosted on Azure with a token requested on the Proxy resources and with Azure Authentication on the proxy, it fails with InternalServerError.

 

Is the AAP only working for use with Users and not Applications? 

Related Conversations