search

MicrosoftDocs / azure-docs

Open source documentation of Microsoft Azure
https://docs.microsoft.com/azure
Creative Commons Attribution 4.0 International
10.31k stars 21.49k forks source link

configure the App in Azure Portal #6922

Closed pedrr closed 6 years ago

pedrr commented 6 years ago

How should the App in the Azure Portal be configured. for SSO with WIA the SPN in mandatory...

Document Details

⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

MohitGargMSFT commented 6 years ago

@pedrr Thanks for your feedback! We will investigate and update as appropriate.

SaurabhSharma-MSFT commented 6 years ago

@pedrr Yes. Please refer to the document [Kerberos Constrained Delegation for single sign-on to your apps with Application Proxy] (https://docs.microsoft.com/en-us/azure/active-directory/active-directory-application-proxy-sso-using-kcd) for more details.

pedrr commented 6 years ago

@SaurabhSharma-MSFT in an environment where I have full domain admin rights you are right. There I am able to specify a SPN on the service an set constrained delegation on the AAD Proxy computer account to this SPN. In Resource Based Constrained Delegation I do not specify any SPN cause I have no domain admin rights in a managed domain.

MohitGargMSFT commented 6 years ago

@pedrr Thanks, you are right. This section Enable resource-based Kerberos constrained delegation for the Azure AD Application Proxy connector in the document helps with the steps on the same.

MohitGargMSFT commented 6 years ago

@pedrr We will now proceed to close this thread. If there are further questions regarding this matter, please reopen it and we will gladly continue the discussion.