Azure App Proxy and SharePoint Online
I am working on validating whether we can access an internal on-prem service, exposed externally via Azure App Proxy, in a client side code. Structure of things 1. An internal service 2. Azure App Proxy exposing the internal service externally 3. A SharePoint Online Page - On this page I am trying to validate whether I can access the service via app proxy Flow 1. User signs-in to the SharePoint Online site 2. Navigates to a page that pulls data from azure app proxy service 3. User should see data from internal service passed over through Azure App Proxy without any authentication challenge Is the above flow possible? I tried the same and it fails where the call to Azure App Proxy is stopped with status code 307. I suspect the call is deemed as unauthenticated and hence failing. Had a look at the various cookies passed when I access SharePoint Online - FedAuth and rtfa Had a look at the various cookies passed when I access Azure App Proxy directly and once authenticated by login - AzureAppProxyUserSessionCookie, ASP.NET_SessionId, AzureAppProxyAccessCookie Considering there are different set of cookies for each authenticated session, I am doubtful, the desired flow is plausible.Multisite Wordpress on Azure.
Hi, I have installed Bitnami multisiste Wordpress on Azure. The site is working when I use the IP-adress I was given on the installation. But I need to combine that IP-adress with the domain-name I like to use. I can nit find where I do this. On the Azure portal, or my Wordpress site. Any suggestions? Best regards - GeirProvide applications access to Azure Stack
For the AzureStack Administrators, When an application needs access to deploy or configure resources through Azure Resource Manager in Azure Stack, you will create a service principal, which is an identity for your application. You can then delegate only the necessary permissions to that service principal. As an example, you may have a configuration management tool that uses Azure Resource Manager to inventory resources. In this scenario, you can create a service principal, grant the reader role to that service principal, and limit the configuration management tool to read-only access. Service principals are preferable to running the app under your own credentials because: You can assign permissions to the service principal that are different than your own account permissions. Typically, these permissions are restricted to exactly what the app needs to do. You do not have to change the app's credentials if your responsibilities change. You can use a certificate to automate authentication when executing an unattended script. More About Applications Access in Azure Stack you find here
RDS in Azure - Alternate Gateway solution
Hello, I have a question about RDS in Azure. I've setup RDS using the Azure AD Application Proxy, and it does work ok, but, its a bit limiting with supported platforms (Only supports Windows and IE). Two things i'm having issues with are: 1. I can lock down access with conditional access and 2FA when accessing RDS via the web page, but this can be by-passed if you connect to the Gateway directly with the RDP Shorcut. I cannot lock down access so you cannot connect directly via RDP. 2. Connectivity from non-windows devices isn't supported, or doesn't work (mobile platforms etc). IE works nice, but chrome/safari etc only work by getting the end user to download the client and running directly to RDS Gateway services. I was therefore wondering if there are alternate ways to present the connection, that keeps the security features, but allows greater support for alternate platforms. Any advice appreciated.
Web job to read from csv in azure storage blob
Hi I have a console job which does two things 1) run SPO power-shell script in c# console job, writes the output to csv 2) c# reads from file and writes to sharepoint online I have packaged this as azure web job and deployed to azure portal, Now i get errors first it is not able to write to csv file second steps also fails So i am trying to add a csv file to azure storage blob type ( which can delete existing file and write new one everytime, so powershell can write to blob storage, then c# need to read from this storage. Is there any better approach then this or if this is fine can some you help me with example how to read /write from blob and where to save the file. Thanks,Enable multi-tenancy in Azure Stack
You can configure Azure Stack to support users from multiple Azure Active Directory (Azure AD) tenants to use services in Azure Stack Check out the "Enable multi-tenancy in Azure Stack" article by Charles Joy https://docs.microsoft.com/en-us/azure/azure-stack/azure-stack-enable-multitenancyGet started tile now live on Azure Stack
We recently announced the release of Azure Stack Technical Preview 3 refresh with Azure PaaS Services. Coming as a part of this release is the Get Started tile that you have grown to love in public Azure. As of this release the tile will only contain content related to Azure Stack administration. We are currently working on bringing you separate experiences for the tenant and admin portals. You will be able to see those changes in future releases. Read about it on the Azure blog.Azure Stack Technical Preview 3 refresh with Azure PaaS services
Today, we are excited to announce preview releases of Azure PaaS services for Azure Stack and a refresh to Azure Stack TP3. Last month, we released Azure Stack TP3 and provided additional information about hybrid use cases, the pay-as-you-use business model for Azure Stack, and roadmap updates. If you haven’t already, read Jeffrey Snover’s Azure Stack TP3 blog post for more context. Additionally, we put together a whitepaper with an even more detailed roadmap of Azure services, integrated systems details, and initial geo-availability. This update continues delivering Azure Services on premises so customers can create innovative applications for the hybrid cloud. Read about it on the Azure blog.
