Azure AD SSO Logs for proffing

%3CLINGO-SUB%20id%3D%22lingo-sub-150667%22%20slang%3D%22en-US%22%3EAzure%20AD%20SSO%20Logs%20for%20proffing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-150667%22%20slang%3D%22en-US%22%3E%3CP%3EHI%20All%2C%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3Ei%20am%20not%20sure%20if%20this%20the%20right%20place%20to%20ask%20this%20question%20.%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3Ei%20am%20trying%20to%20achieve%20SSO%20using%20azure%20ad%20service.%20i%20have%20below%20listed%20resources%26nbsp%3B%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%3EOne%20Active%20directory%20server%20configured%20on%20Azure%20with%20domain%20name%20(mydomain.com)%3C%2FLI%3E%0A%3CLI%3EOne%20Web%20Server%20joined%20in%20mydoamin.com%20hosting%20multiple%20application%20on%20windows%20authentication%2C%20form%20authentications.%3C%2FLI%3E%0A%3CLI%3EAzure%20AD%20service%26nbsp%3B%3C%2FLI%3E%0A%3CLI%3EAzure%20ad%20connecter%20installed%20on%20Ad%20server%20mentioned%20in%20first%20step%20with%20password%20replication.%3C%2FLI%3E%0A%3CLI%3EAzure%20Application%20proxy%20installed%20on%20web%20server%26nbsp%3B%26nbsp%3B%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%3Eall%20application%20hosted%20on%20webserver%20are%20visible%20on%20%22Myapp.microsoft.com%22%20dashboard.%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3ENow%20i%20want%20to%20generate%20some%20logs%20to%20prove%20how%20my%20SSO%20configuration%20is%20working%20.%20i%20want%20to%20generate%20logs%20on%20resources%20such%20i%20can%20show%20complete%20flow%20of%20authentication%20and%20application%20access%20but%20i%20dont%20know%20how%20%3F%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3Eplease%20help%20%3F%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3Ethanks%20in%20advance%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-150667%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAzure%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-150796%22%20slang%3D%22en-US%22%3ERe%3A%20Azure%20AD%20SSO%20Logs%20for%20proffing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-150796%22%20slang%3D%22en-US%22%3E%3CP%3EYes%20%2C%20fiddler%20did%20give%20me%20all%20redirects%20and%20application%20url%20%2C%20but%20i%20am%20also%20looking%20for%20complete%20flow%20log%20%2C%20i%20mean%20when%20it%20goes%20to%20azure%20ad%20service%20and%20application%20server%20and%20local%20AD%20server%20so%20that%20i%20can%20show%20complete%20flow%20in%20log.%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3Ei%20hope%20i%20am%20looking%20for%20valid%20thing%20%3A)%3C%2Fimg%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-150793%22%20slang%3D%22en-US%22%3ERe%3A%20Azure%20AD%20SSO%20Logs%20for%20proffing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-150793%22%20slang%3D%22en-US%22%3E%3CP%3Ewhat%20about%20fiddler%3F%20did%20you%20give%20it%20a%20try%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-150789%22%20slang%3D%22en-US%22%3ERe%3A%20Azure%20AD%20SSO%20Logs%20for%20proffing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-150789%22%20slang%3D%22en-US%22%3EI%20did%20try%20that%20but%20could%20not%20find%20anything%20related%20to%20this%20on%20event%20log%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-150788%22%20slang%3D%22en-US%22%3ERe%3A%20Azure%20AD%20SSO%20Logs%20for%20proffing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-150788%22%20slang%3D%22en-US%22%3E%3CP%3EThanks%20for%20reply%20%2C%20i%20did%20try%20that%20but%20could%20not%20find%20any%20related%20to%20this%20on%20event%20log%20%3A(%3C%2Fimg%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-150679%22%20slang%3D%22en-US%22%3ERe%3A%20Azure%20AD%20SSO%20Logs%20for%20proffing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-150679%22%20slang%3D%22en-US%22%3E%3CP%3EYou%20may%20want%20to%20check%20App%20proxy%20logs%20in%20Event%20Viewer%3A%3C%2FP%3E%0A%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Factive-directory%2Fapplication-proxy-understand-connectors%23under-the-hood%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Factive-directory%2Fapplication-proxy-understand-connectors%23under-the-hood%3C%2FA%3E%3C%2FP%3E%0A%3CP%3EOr%20from%20client%20side%20you%20can%20use%20Fiddler%20to%20track%20web%20traffic%3A%3C%2FP%3E%0A%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fwww.telerik.com%2Ffiddler%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fwww.telerik.com%2Ffiddler%3C%2FA%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E
Deleted
Not applicable

HI All, 

 

i am not sure if this the right place to ask this question . 

 

i am trying to achieve SSO using azure ad service. i have below listed resources 

  • One Active directory server configured on Azure with domain name (mydomain.com)
  • One Web Server joined in mydoamin.com hosting multiple application on windows authentication, form authentications.
  • Azure AD service 
  • Azure ad connecter installed on Ad server mentioned in first step with password replication.
  • Azure Application proxy installed on web server  

all application hosted on webserver are visible on "Myapp.microsoft.com" dashboard. 

 

Now i want to generate some logs to prove how my SSO configuration is working . i want to generate logs on resources such i can show complete flow of authentication and application access but i dont know how ?

 

please help ?

 

thanks in advance 

5 Replies

You may want to check App proxy logs in Event Viewer:

https://docs.microsoft.com/en-us/azure/active-directory/application-proxy-understand-connectors#unde...

Or from client side you can use Fiddler to track web traffic:

https://www.telerik.com/fiddler

Thanks for reply , i did try that but could not find any related to this on event log :( 

I did try that but could not find anything related to this on event log

what about fiddler? did you give it a try?

Yes , fiddler did give me all redirects and application url , but i am also looking for complete flow log , i mean when it goes to azure ad service and application server and local AD server so that i can show complete flow in log. 

 

i hope i am looking for valid thing :)