You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Before you get started, make sure you are familiar with app management and **Single Sign-On (SSO)** concepts. Check out the following links:
22
+
Before you get started, make sure you're familiar with app management and **Single Sign-On (SSO)** concepts. Check out the following links:
23
23
-[Quickstart Series on App Management in Azure AD](../manage-apps/view-applications-portal.md)
24
24
-[What is Single Sign-On (SSO)?](../manage-apps/what-is-single-sign-on.md)
25
25
@@ -57,7 +57,7 @@ For high availability in your production environment, we recommend having more t
57
57
>
58
58
> **HTTP 2.0**
59
59
>
60
-
> If you are installing the connector on Windows Server 2019, you must disable HTTP2 protocol support in the WinHttp component for Kerberos Constrained Delegation to properly work. This is disabled by default in earlier versions of supported operating systems. Adding the following registry key and restarting the server disables it on Windows Server 2019. Note that this is a machine-wide registry key.
60
+
> If you're installing the connector on Windows Server 2019, you must disable HTTP2 protocol support in the WinHttp component for Kerberos Constrained Delegation to properly work. This is disabled by default in earlier versions of supported operating systems. Adding the following registry key and restarting the server disables it on Windows Server 2019. Note that this is a machine-wide registry key.
61
61
>
62
62
> ```
63
63
> Windows Registry Editor Version 5.00
@@ -143,7 +143,7 @@ You can allow connections to `*.msappproxy.net`, `*.servicebus.windows.net`, and
143
143
144
144
### DNS name resolution for Azure AD Application Proxy endpoints
145
145
146
-
Public DNS records for Azure AD Application Proxy endpoints are chained CNAME records pointing to an A record. Setting up the records this way ensures fault tolerance and flexibility. It’s guaranteed that the Azure AD Application Proxy Connector always accesses host names with the domain suffixes `*.msappproxy.net` or `*.servicebus.windows.net`. However, during the name resolution the CNAME records might contain DNS records with different host names and suffixes. Due to this, you must ensure that the device (depending on your setup - connector server, firewall, outbound proxy) can resolve all the records in the chain and allows connection to the resolved IP addresses. Since the DNS records in the chain might be changed from time to time, we cannot provide you with any list DNS records.
146
+
Public DNS records for Azure AD Application Proxy endpoints are chained CNAME records pointing to an A record. Setting up the records this way ensures fault tolerance and flexibility. It’s guaranteed that the Azure AD Application Proxy Connector always accesses host names with the domain suffixes `*.msappproxy.net` or `*.servicebus.windows.net`. However, during the name resolution the CNAME records might contain DNS records with different host names and suffixes. Due to the difference, you must ensure that the device (depending on your setup - connector server, firewall, outbound proxy) can resolve all the records in the chain and allows connection to the resolved IP addresses. Since the DNS records in the chain might be changed from time to time, we can't provide you with any list DNS records.
147
147
148
148
## Install and register a connector
149
149
@@ -268,7 +268,7 @@ For troubleshooting, see [Troubleshoot Application Proxy problems and error mess
268
268
269
269
## Clean up resources
270
270
271
-
Don't forget to delete any of the resources you created in this tutorial when you are done.
271
+
Don't forget to delete any of the resources you created in this tutorial when you're done.
0 commit comments