Forum Discussion
AAD application proxy : access from external issue
Hello,
I have published an application with SAML SSO. from internal, it works fine.
When I connect to https://myapp, all is ok.
I have set up an external Url : https://myapp.my_custom_external.com
When i try to access, i get error AADSTS50011.
I added https://myapp.my_custom_external.com on redirected URI as this article mentionned : https://learn.microsoft.com/en-us/troubleshoot/azure/entra/entra-id/app-integration/error-code-aadsts50011-redirect-uri-mismatch
But now when i try to access https://myapp.my_custom_external.com, i get a timeout.
Can you help me?
Thanks.
Regards.
Ok it works now
I ve got a fortigate, with webfilter or other security profile, it does not work, i had to open Internet services.Like this :
thanks for help.
- ARAIMBAULTCopper Contributor
Thank you for your answer but unfortunately I already did this trick and like I said, I get a timeout.
Regards.
- JamesscarrCopper Contributor
When internal, try and ping the web address that worked (https://myapp) does it resolve an internal address? If so, SAML SSO may still work because it might not be using the App Proxy.
Have you verified you can can communicate between your server hosting the agent and the application? Have you verified that the Server hosting the proxy agent has outbound Internet access and can communicate with Entra ID?