Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Unable to connect to URL via Azure App Proxy #8513

Open
tlinnyc opened this issue Jan 22, 2025 · 1 comment
Open

Unable to connect to URL via Azure App Proxy #8513

tlinnyc opened this issue Jan 22, 2025 · 1 comment

Comments

@tlinnyc
Copy link

tlinnyc commented Jan 22, 2025

We're hosting Mattermost Enterprise on-prem and want to allow remote access via Azure App Proxy. I'm not sure if this is a bug or just a feature request.
Device information
Tested on both S22 Ultra (Android 14) and iPad Air 5th Gen (iOS 18.1)

Repro steps

  1. Set up App Proxy in Azure for Mattermost
  2. For Pre Authentication set to Microsoft Entra ID
    Image
  3. Log in via specified external URL on app proxy

Observed behavior (including screenshot / video when possible)
When trying to connect to the URL, I'll get this
Image
That's happening because it can't open up a browser or a web page for me to authenticate through Microsoft.

After setting the Pre Authentication to Passthrough instead of Microsoft Entra ID, I'm able to get through since it doesn't require me to authenticate through Microsoft
Image

After selecting SAML, it opens up a web page to authenticate through Microsoft
Image
Would it be possible to implement a web page or log in prompt similar to what I see for SAML when trying to connect to a URL?

When testing on PC, seems to work fine because it allows you to connect anyway
Image
Then it brings up the Microsoft login page to access the URL
Image

Expected behavior
Allow browser to pop up when trying to connect to a URL to authenticate

@tlinnyc
Copy link
Author

tlinnyc commented Jan 23, 2025

This is the traffic that happens after hitting connect and it errors with "Cannot connect to the server"
Image
It hits the Azure app proxy endpoint, then it tries to go through the authentication process via login.microsoftonline.com, then it errors out because it doesn't know how to handle it I'm guessing? So, I'm wondering if it possible to bring up a browser to allow authentication.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant