Configuring Azure AD Application Proxy
In addition to providing identity services, Azure AD also has features to help connect your on-premises applications and make them available as endpoints on the internet. The feature, known as Azure AD Application Proxy (sometimes referenced as Azure AD App Proxy or Azure App Proxy), provides a sort of gateway or conduit between your on-premises applications and Azure AD.
Important
For an on-premises application to be compatible with the Azure AD App Proxy connector service, it must have a web frontend, use Remote Desktop Gateway, or rich client apps that are integrated with the Microsoft Authentication Library. Azure AD App Proxy cannot publish standard Windows desktop applications.
After one or more Azure AD App Proxy Connectors are deployed, applications can be registered in Azure AD to use the connectors. When a user accesses the application, their request is relayed via the connector to the on-premises app. See Figure 9.14.