Azure Application Proxy usage and AD Premium/licensing

%3CLINGO-SUB%20id%3D%22lingo-sub-59580%22%20slang%3D%22en-US%22%3EAzure%20Application%20Proxy%20usage%20and%20AD%20Premium%2Flicensing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-59580%22%20slang%3D%22en-US%22%3E%3CP%3EHi%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Equestion%20regarding%20license%20requirements%20for%20Azure%20Application%20Proxy.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Ethe%20person%20configuring%20AAP%20requires%20an%20AD%20Premium%20license%2C%20what%20other%20requirements%20are%20there%20around%20AAP%20and%20the%20need%20for%20AD%20Premium%20licensing%3F%3C%2FP%3E%3CP%3Ewhat%20features%20do%20end%20users%20need%20to%20be%20consuming%20via%20AAP%20to%20require%20an%20AD%20Premium%20license%3F%3C%2FP%3E%3CP%3Eis%20it%20only%20conditional%20access%3F%3C%2FP%3E%3CP%3Eis%20it%20for%20all%20authenticated%20publishing%20usage%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Ei%20cant%20find%20any%20firm%20difinitive%20definitions%20of%20which%20features%20require%20strict%20licensing%2C%20either%20from%20a%20functional%20basis%20(i%20believe%20currently%20that%20conditional%20access%20requires%20AD%20Premium%20end%20user%20license%20in%20order%20for%20it%20to%20actually%20work)%20as%20opposed%20to%20a%20pure%20licensed%20service%20basis%20(any%20user%20can%20authenticate%20and%20sign%20in%2C%20but%20should%20that%20access%20be%20licensed)%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Eany%20one%20know%20difinitively%3F%20or%20able%20to%20point%20me%20in%20the%20direction%20of%20relevant%20documentation%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks%20in%20advance%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EPete%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-59580%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EApp%20Services%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EAzure%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EVirtual%20Network%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-357325%22%20slang%3D%22en-US%22%3ERe%3A%20Azure%20Application%20Proxy%20usage%20and%20AD%20Premium%2Flicensing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-357325%22%20slang%3D%22en-US%22%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSTRONG%3EAzure%20Active%20Directory%20Basic%3C%2FSTRONG%3E%20has%20a%20cost%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fazure.microsoft.com%2Fen-au%2Fpricing%2Fdetails%2Factive-directory%2F%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fazure.microsoft.com%2Fen-au%2Fpricing%2Fdetails%2Factive-directory%2F%3C%2FA%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-63286%22%20slang%3D%22en-US%22%3ERe%3A%20Azure%20Application%20Proxy%20usage%20and%20AD%20Premium%2Flicensing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-63286%22%20slang%3D%22en-US%22%3E%3CP%3EThanks%20Viktor%2C%20I%26nbsp%3Bhadn't%20spotted%20that%20documentation.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Eso%2C%20to%20confirm%2C%20as%20per%20the%20above%2C%20it%20is%20only%20SSO%20published%20apps%20(Azure%20AD%20SSO)%26nbsp%3Bthat%20impact%20on%20the%20license%20consumption%20for%20AAP%2C%20publishing%20pass%20through%2C%20or%20other%20non-Azure%20AD%20SSO%20apps%2Fsites%2C%20as%20it%20supports%2C%20is%20'free'%20or%20otherwise%20consumes%20no%20license%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Echeers%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EPete%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-62862%22%20slang%3D%22en-US%22%3ERe%3A%20Azure%20Application%20Proxy%20usage%20and%20AD%20Premium%2Flicensing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-62862%22%20slang%3D%22en-US%22%3EHi%20Peter%2C%3CBR%20%2F%3E%3CBR%20%2F%3EAzure%20AD%20basic%20will%20do%20it%20if%20you%20only%20want%20to%20use%20AAP.%3CBR%20%2F%3E%3CBR%20%2F%3EPlease%20see%20the%20following%20documentation.%3CBR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Factive-directory%2Factive-directory-editions%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Factive-directory%2Factive-directory-editions%3C%2FA%3E%3CBR%20%2F%3E%3CBR%20%2F%3Ebest%20regards%3C%2FLINGO-BODY%3E
Highlighted
Contributor

Hi,

 

question regarding license requirements for Azure Application Proxy.

 

the person configuring AAP requires an AD Premium license, what other requirements are there around AAP and the need for AD Premium licensing?

what features do end users need to be consuming via AAP to require an AD Premium license?

is it only conditional access?

is it for all authenticated publishing usage?

 

i cant find any firm difinitive definitions of which features require strict licensing, either from a functional basis (i believe currently that conditional access requires AD Premium end user license in order for it to actually work) as opposed to a pure licensed service basis (any user can authenticate and sign in, but should that access be licensed)?

 

any one know difinitively? or able to point me in the direction of relevant documentation?

 

Thanks in advance

 

Pete 

3 Replies
Highlighted
Hi Peter,

Azure AD basic will do it if you only want to use AAP.

Please see the following documentation.
https://docs.microsoft.com/en-us/azure/active-directory/active-directory-editions

best regards
Highlighted

Thanks Viktor, I hadn't spotted that documentation.

 

so, to confirm, as per the above, it is only SSO published apps (Azure AD SSO) that impact on the license consumption for AAP, publishing pass through, or other non-Azure AD SSO apps/sites, as it supports, is 'free' or otherwise consumes no license?

 

cheers

 

Pete

 

Highlighted