topic Re: Azure Application Proxy in ArcGIS Enterprise Questions

Azure Application Proxy

DavidMartin — Mon, 02 Jul 2018 19:12:14 GMT

Has anyone yet had any experience of integrating an On-Premise ArcGIS Enterprise deployment with Azure AD Application Proxy? I'm particularly interested in achieving Single Sign On for On Premise users as well as external users.

I've not yet been able to perform a test, but would be interested to hear of how others have got on with getting the two to work together, and whether there are any lessons to be learnt?

Re: Azure Application Proxy

AdamEversole1 — Mon, 07 Jan 2019 22:22:30 GMT

Hello David,

We have documentation on how to configure Portal for ArcGIS with Azure AD:

- http://enterprise.arcgis.com/en/portal/latest/administer/windows/configure-azure-active-directory.htm

This looks like the Documentation from the Azure side of things:

- https://docs.microsoft.com/en-us/azure/active-directory/saas-apps/arcgisenterprise-tutorial

I've not actually set this up on my own but potentially someone in the community has and can share the experience had on this thread.

Hope this helps!

- Adam

Re: Azure Application Proxy

FarmersBranchBrian — Mon, 05 Aug 2019 20:22:28 GMT

Has anyone had any luck with this? I've managed to get the proxy app working but it breaks SAML integration when done, rendering it all but useless.

Re: Azure Application Proxy

GISCoordinator2 — Wed, 23 Sep 2020 02:03:38 GMT

We are also having issues trying to implement Azure Enterprise Application Proxy. We have it working with SAML and working really well in browsers, but when it comes to ArcGIS Collector App this does not.

-Steffen

Re: Azure Application Proxy

GlenShepherd — Fri, 25 Sep 2020 05:59:24 GMT

Hi David Martin,

You may want to take a look at your 'pre-authentication' configuration for the Azure App Proxy.

The "Azure Active Directory" setting causes a 302 redirect for users to sign in with Azure AD credentials and is currently known to be problematic for the ArcGIS Field Apps suite.

Using the "Passthrough" setting won't require users to authenticate with Azure AD and client requests will be forwarded to ArcGIS Enterprise. The following link may provide further detail: Tutorial - Add an on-premises app - Application Proxy in Azure AD | Microsoft Docs

credit to Philip McNeilly for this product support knowledge.

Re: Azure Application Proxy

KristineSmaadal1 — Tue, 19 Jan 2021 07:36:10 GMT

Hi Steffen,
When you got the AAP to work with ArcGIS Enterprise in browsers, did you use Pre-authentication or Pass through? I am interested in using AAP for webapplications hosted in Portal, but I need it to work with pre authentication.

- Kristine

Re: Azure Application Proxy

BanchanaPandey — Thu, 28 Jan 2021 02:14:05 GMT

@GlenShepherd @AdamEversole1

Is there a document to configure stand alone arcgis server through azure app proxy? this arcgis server is not federated to portal. it uses the web tier authentication and has web adaptor.

Re: Azure Application Proxy

GISCoordinator2 — Tue, 10 Dec 2024 23:22:32 GMT

Six years from David's initial report, and we still have no information from ESRI Inc if they will ever support pre-authentication in the Field Apps Suite. I do wonder how is it not a bigger issue, or does enterprise server security not play a part for most players? -Steffen

Re: Azure Application Proxy

PatOBrien — Wed, 12 Feb 2025 21:09:48 GMT

@GISCoordinator2 Steffen my team have done this one to death here on the forums, via ESRI tech support & also ESRI accounts management. The question was put to the ESRI product team and I got this response on 1st Feb 2024:
"This is a well-understood requirement that Esri is actively investigating. Unfortunately, it is also a complex requirement because of the lack of standardization across the industry and we cannot give a specific timeline for when they may see support show up across our mobile apps and ArcGIS Enterprise. "

Having the Azure App Proxy pre-authentication setting set to Microsoft Entra ID is standard and globally adopted, therefore I disagree with the ESRI statement.

No solution.