Daily.Entra.News49 changes were tracked across 4 Microsoft Entra products. The leading updates include Forcepoint Cloud Security Gateway Provisioning Tutorial; Application Proxy Integrate With Sharepoint Server; Application Proxy Integrate With Microsoft Cloud Application Security.
- RD Gateway comes into the picture once a user launches the RDP connection. The RD Gateway handles encrypted RDP traffic coming over the internet and translates it to the on-premises server that the user is connecting to. In this scenario, the traffic the RD Gateway is receiving comes from the Microsoft Entra application proxy.
- Cross-domain scenarios rely on referrals that direct a connector host to DCs that might be outside of the local network perimeter. In these cases, it's equally important to send traffic onward to DCs that represent other respective domains. If you don't, delegation fails.
If you can't use custom domains in your tenant, there are several other options for providing this functionality. All of the other options are also compatible with custom domains and each other, so you can configure custom domains and other solutions.
Public Domain Name System (DNS) records for Microsoft Entra application proxy endpoints are chained CNAME records pointing to an A record. Setting up the records this way ensures fault tolerance and flexibility. The Microsoft Entra private network connector always accesses host names with the domain suffixes `*.msappproxy.net` or `*.servicebus.windows.net`. However, during the name resolution the CNAME records might contain DNS records with different host names and suffixes. Due to the difference, you must ensure that the device (depending on your setup - connector server, firewall, outbound proxy) can resolve all the records in the chain and allows connection to the resolved IP addresses. Since the DNS records in the chain might be changed from time to time, we can't provide you with any list DNS records.
- CORS Rules (optional) can be configured per application segment.
As a result of having only outbound traffic, there's no need to configure inbound access through your firewalls.
- `msauth://com.microsoft.powerbim/izba1HXNWrSmQ7ZvMXgqeZPtNEU%3D`
ai-usage: ai-assisted
ai-usage: ai-assisted
ai-usage: ai-assisted
ai-usage: ai-assisted
The simplest scenario is where the back-end web application doesn’t require session stickiness (session persistence). A back-end application instance handles user requests in the server farm. You can use a layer 4 load balancer and configure it with no affinity. Some options include Microsoft Network Load Balancing and Azure Load Balancer or a load balancer from another vendor. Alternatively, configure a round-robin Domain Name System (DNS) strategy.
ai-usage: ai-assisted
ai-usage: ai-assisted
ai-usage: ai-assisted
Explains requirements to prepare FIDO2 hardware for attestation with Microsoft Entra ID
**Type:** New feature
author: jenniferf-skc
ai-usage: ai-assisted
A Microsoft Entra documentation page was updated: Navigate.
| |[What is self-service password reset?](https://youtu.be/hc97Yx5PJiM)|
Learn how to configure single sign-on between Microsoft Entra ID and Pexip Service.
manager: CelesteDG
| Date | Area | Description |
Here are some of the limits and constraints for restricted management administrative units.
author: garrodonnell
author: garrodonnell
|Attribute|Type|Supported for filtering|Required by Forcepoint Cloud Security Gateway - User Authentication|
1. Select **application proxy**.
- A Microsoft Entra tenant with a plan that includes application proxy. Learn more about [Microsoft Entra ID plans and pricing](https://www.microsoft.com/security/business/identity-access-management/azure-ad-pricing).
ai-usage: ai-assisted
Provide the credentials for an Application Administrator in your Microsoft Entra directory. The Microsoft Entra Application Administrator credentials are often different from your Azure credentials in the portal.
To configure single sign-on on **My IBISWorld** side, you need to send the **App Federation Metadata Url** to your IBISWorld Client Relationship Manager. We'll need this to have the SAML SSO connection set properly on both sides.
ai-usage: ai-assisted
> You may also choose to enable SAML-based single sign-on for Harness by following the instructions in the [Harness single sign-on article](./harness-tutorial.md). You can configure single sign-on independent of automatic user provisioning, although these two features complement each other.
Locate and engage partners for guidance on Microsoft Entra deployment.
|Partner|Description|
ai-usage: ai-assisted
This article explains how to troubleshoot issues with Microsoft Entra application proxy. Use the flowchart to fix remote access issues for an on-premises web application.
```powershell
Include file
1. At the top of the page, select **New configuration**.
- Cross-tenant synchronization is supported within the commercial cloud and Azure Government.
- [Microsoft Entra External ID frequently asked questions](faq-customers.md) - Added clarification on tenant creation
manager: femila
