Connect with experts and redefine what’s possible at work – join us at the Microsoft 365 Community Conference May 6-8. Learn more >
Recent DiscussionsMost RecentNewest TopicsMost LikesSolutionsTagged:TagRe: AAD application proxy : access from external issue Ok it works now I ve got a fortigate, with webfilter or other security profile, it does not work, i had to open Internet services. Like this : thanks for help. Re: AAD application proxy : access from external issueI have tested, it is a firewall issue. Web filter issue to for precision. I followed this page but it miss some websites : https://learn.microsoft.com/en-us/entra/global-secure-access/how-to-configure-connectors have you got the new prerequisites? thanks.Re: AAD application proxy : access from external issue Sorry, i have recheck and i can see thios error. Re: AAD application proxy : access from external issue HEllo, My firewall has an IP, supposed 10.11.12.13. this is the connector external IP BUT port 443 is redirected to vpnssl webpage. Could it be an explanation? Re: AAD application proxy : access from external issueI have tested with DNS resolution for the external URL, timeout too. There is no error message in agent log. Seems that MS entra can't connect to agent, even when agent can connect to MS entra.Re: AAD application proxy : access from external issueI have tested with an msappproxy.net domain. I get error AADSTS50011 and if i update application registration, i get a timeout. So, it's the same.Re: AAD application proxy : access from external issue Jamesscarr I cannot change custom domain to msappproxy.net domain, i have to create another application. I will test. Yes proxy agent is online. Re: AAD application proxy : access from external issueI have installed wireshark on proxy agent server, and when I log in with SAML, there is no communication between app server and proxy agent. I don't know what i miss. 😕Re: AAD application proxy : access from external issueHi, Yes, in internal, when I ping "myapp" host, it resolve an internal address. Yes, server hosting agent can communicate with server hosting application. Proxy agent server can communicate with entra. this server is the same as AAD synchronisation service server.Re: AAD application proxy : access from external issue micheleariis Thank you for your answer but unfortunately I already did this trick and like I said, I get a timeout. Regards. AAD application proxy : access from external issue Hello, I have published an application with SAML SSO. from internal, it works fine. When I connect to https://myapp, all is ok. I have set up an external Url : https://myapp.my_custom_external.com When i try to access, i get error AADSTS50011. I added https://myapp.my_custom_external.com on redirected URI as this article mentionned : https://learn.microsoft.com/en-us/troubleshoot/azure/entra/entra-id/app-integration/error-code-aadsts50011-redirect-uri-mismatch But now when i try to access https://myapp.my_custom_external.com, i get a timeout. Can you help me? Thanks. Regards. Solved
