title | description | services | documentationcenter | author | manager | editor | ms.assetid | ms.service | ms.workload | ms.tgt_pltfrm | ms.devlang | ms.topic | ms.date | ms.author |
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
Classic portal Azure AD App Proxy connectors | Microsoft Docs |
Covers how to create and manage groups of connectors in Azure AD Application Proxy. |
active-directory |
kgremban |
femila |
harshja |
b283796a-9679-4c79-b703-802bb850f65d |
active-directory |
identity |
na |
na |
article |
01/23/2017 |
kgremban |
[!div class="op_single_selector"]
Connector groups are useful for various scenarios, including:
- Sites with multiple interconnected datacenters. In this case, you want to keep as much traffic within the datacenter as possible because cross-datacenter links are usually expensive and slow. You can deploy connectors in each datacenter to serve only the applications that reside within the datacenter. This approach minimizes cross-datacenter links and provides an entirely transparent experience to your users.
- Managing applications installed on isolated networks that are not part of the main corporate network. You can use connector groups to install dedicated connectors on isolated networks to also isolate applications to the network.
- For applications installed on IaaS for cloud access, connector groups provide a common service to secure the access to all the apps. Connector groups don't create additional dependency on your corporate network, or fragment the app experience. Connectors can be installed on every cloud datacenter and serve only applications that reside in this network. You can install several connectors to achieve high availability.
- Support for multi-forest environments in which specific connectors can be deployed per forest and set to serve specific applications.
- Connector groups can be used in Disaster Recovery sites to either detect failover or as backup for the main site.
- Connector groups can also be used to serve multiple companies from a single tenant.
In order to group your connectors, you have to make sure you installed multiple connectors, and that you name them and then group them. Finally you have to assign them to specific apps.
You can create as many connector groups as you want. Connector group creation is accomplished in the Azure classic portal.
- Select your directory and click Configure.
- Under Application Proxy, click Manage Connector Groups and create a new connector group by giving the group a name.
Once the connector groups are created, move the connectors to the appropriate group.
- Under Application Proxy, click Manage Connectors.
- Under Group, select the group you want for each connector. It might take the connectors up to 10 minutes to become active in the new group.
The last step is to set each application to the connector group that will serve it.
- In the Azure classic portal, in your directory, select the Application you want to assign to the group and click Configure.
- Under Connector group, select the group you want the application to use. This change is immediately applied.
- Enable Application Proxy
- Enable single-sign on
- Enable conditional access
- Troubleshoot issues you're having with Application Proxy
For the latest news and updates, check out the Application Proxy blog