App Proxy and Enterprise App SAML auth on-premises app
Hi all, Trying to get my head around a scenario and how it should work or the direction that should be taken. We (a customer) has a custom internal app that is being set to use Azure AD for SAML based auth. This app also need to be made accessible externally. Should the app have its own app registration/enterprise app and the app proxy function be a separate entity in Azure AD or should it all be a single Enterprise app with app proxy/SAML etc all together? I figure for future flexibility separating the app auth from the app proxy would be good, but then I can't think how we would actually do the app proxy SSO configuration. doing it as a single all-in-one I seem to run into some SAML issues (reply URL based) that will be down to the app configuration when accessed through app proxy. The azure AD auth would be the authentication method internally and externally for the app.
