I've asked this over at StackOverflow and also as a reply on another thread in this forum, but think this question is appropriate as a stand-alone topic in this forum.
I have an internal LOB UWP app which I want to make available to company employees across the world. With the future of the MS Store for Business uncertain, we've move in the direction of web distribution.
The app already does AAD auth internally, but we'd like to require users to be authenticated against AAD before even getting to the web distribution page. Pushing this out to an Azure web site with 'Easy Auth' turned on seems like a good solution for this.
However, turning this feature on breaks the installer experience with the AppInstaller displaying the message 'An error occurred while accessing the file from the web. Please try downloading and opening the file locally'. This is probably because the AppInstaller is making its own http request to the msix file without using inherited auth tokens from the original web login. My guess is this will also be a problem for the auto-update feature.
Is this problem solvable today or will it be solvable in the future? Is there a better approach to this problem which doesn't require being on a company WAN?
