Configuring ADSelfService Plus in Microsoft Entra Application Proxy

Microsoft Entra Application Proxy enables secure remote access to on-premises applications like ManageEngine ADSelfService Plus by leveraging Microsoft Entra ID for authentication and access control. Before proceeding with the configuration, ensure that the necessary prerequisites are met.

Prerequisites

• A Microsoft Entra ID P1 or P2 subscription.
• An application administrator account.
• A synchronized set of user identities from an on-premises directory, or ones that you create directly within your Microsoft Entra tenant.

Identity synchronization enables Microsoft Entra ID to pre-authenticate users before granting access to application proxy-published applications. It also provides the necessary user identifier information for SSO.

Steps for configuration

To integrate an on-premises application like ADSelfService Plus with Microsoft Entra ID, follow these steps:

1. Access Microsoft Entra portal through this link.
2. Click Download connector service.

   

3. Install the connector service and log in with your Microsoft account when prompted.
4. Click Configure an app.

   

5. Fill in the following fields to configure your application.
   • Name: Enter a name for your application.
   • Internal URL: Specify the URL where ADSelfService Plus is running locally (for example, http(s)://localhost:<port>).
   • External URL: Enter the desired external URL.

     Note: The external URL must always use HTTPS.

   • Pre-Authentication: Select the Passthrough option.
   • Fill out any other required settings.
   • Click Create.

     Note: It may take up to five minutes for the settings to take effect.

     

Once successfully configured, the External URL will route traffic to the locally running ADSelfService-Plus application. For further assistance, please contact us at support@adselfserviceplus.com.