Skip to content

Commit 648ef9f

Browse files
authored
Update application-proxy-configure-complex-application.md
1 parent 84bbd49 commit 648ef9f

File tree

1 file changed

+9
-9
lines changed

1 file changed

+9
-9
lines changed

articles/active-directory/app-proxy/application-proxy-configure-complex-application.md

Lines changed: 9 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -2,21 +2,21 @@
22
title: Complex applications for Azure Active Directory Application Proxy
33
description: Provides an understanding of complex application in Azure Active Directory Application Proxy, and how to configure one.
44
services: active-directory
5-
author: dhruvinshah
6-
manager: ashishj
5+
author: kenwith
6+
manager: karenhoran
77
ms.service: active-directory
88
ms.subservice: app-proxy
99
ms.workload: identity
1010
ms.topic: how-to
1111
ms.date: 04/22/2022
1212
ms.author: dhruvinshah
13-
ms.reviewer: ashishj
13+
ms.reviewer: dhruvinshah
1414
---
1515

1616
# Understanding Azure Active Directory Application Proxy Complex application scenario (Preview)
1717

18-
When applications are made up of multiple individual web application instances using different domain suffixes or different ports or paths in the URL, the individual web application instances must be published in separate Azure AD Application Proxy apps and the following problems might arise:
19-
1. Pre-authentication- The client must separately acquire an access token or cookie for each Azure AD Application Proxy apps. This might lead to additional redirects to login.microsoftonline.com and CORS issues.
18+
When applications are made up of multiple individual web application using different domain suffixes or different ports or paths in the URL, the individual web application instances must be published in separate Azure AD Application Proxy apps and the following problems might arise:
19+
1. Pre-authentication- The client must separately acquire an access token or cookie for each Azure AD Application Proxy app. This might lead to additional redirects to login.microsoftonline.com and CORS issues.
2020
2. CORS issues- Cross-origin resource sharing calls (OPTIONS request) might be triggered to validate if the caller web app is allowed to access the URL of the targeted web app. These will be blocked by the Azure AD Application Proxy Cloud service, since these requests cannot contain authentication information.
2121
3. Poor app management- Multiple enterprise apps are created to enable access to a private app adding friction to the app management experience.
2222

@@ -26,10 +26,10 @@ The following figure shows an example for complex application domain structure.
2626

2727
With [Azure AD Application Proxy](application-proxy.md), you can address this issue by using complex application publishing that is made up of multiple URLs across various domains.
2828

29-
![Proposed flow for Complex-app-flow](./media/application-proxy-configure-complex-application/Complex-app-flow.png)
29+
![Configuration Complex application](./media/application-proxy-configure-complex-application/complex-app-flow.png)
3030

3131
A complex app has multiple app segments, with each app segment being a pair of an internal & external URL.
32-
There is one conditional access policy associated with the app and access to any of the external URL's work with pre-authentication with the same set of policies enforced for all.
32+
There is one conditional access policy associated with the app and access to any of the external URLs work with pre-authentication with the same set of policies that are enforced for all.
3333

3434
This solution that allows user to:
3535

@@ -39,9 +39,9 @@ This solution that allows user to:
3939

4040
This article provides you with the information you need to configure wildcard application publishing in your environment.
4141

42-
## Charactrisitics of application segment(s) for complex application.
42+
## Characteristics of application segment(s) for complex application.
4343
1. Application segments can be configured only for a wildcard application.
44-
2. External and alternal URL should match the wildcard external and alternal URL domain of the application respectively.
44+
2. External and alternate URL should match the wildcard external and alternate URL domain of the application respectively.
4545
3. Application segment URL’s (internal and external) need to maintain uniqueness across complex applications.
4646
4. CORS Rules (optional) can be configured per application segment.
4747
5. Access will only be granted to defined application segments for a complex application.

0 commit comments

Comments
 (0)