# Azure Application Proxy

**URL:** <https://forum.inductiveautomation.com/t/azure-application-proxy/32611>\
**Category:** Ignition\
**Tags:** perspective\
**Created:** [February 26, 2020, 1:17am UTC](https://forum.inductiveautomation.com/t/azure-application-proxy/32611 "2020-02-26T01:17:53Z")\
**Posts on this page:** 12\
**Page:** 1

<div class="post-metadata">

**Author:** ![DavidWisely](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/davidwisely/32/10482_2.png) [@DavidWisely](https://forum.inductiveautomation.com/u/DavidWisely)\
**Post date:** [February 26, 2020, 1:17am UTC](https://forum.inductiveautomation.com/t/azure-application-proxy/32611/1 "2020-02-26T01:17:53Z")

</div>

I need to make Perspective accessable on the internet and am thinking of setting it up through Microsofts Azure Application Proxy as described here:

> **[Publish on-premises apps with Azure Active Directory Application Proxy](https://docs.microsoft.com/en-us/azure/active-directory/app-proxy/what-is-application-proxy)**
>
> Understand why to use Application Proxy to publish on-premises web applications externally to remote users. Learn about Application Proxy architecture, connectors, authentication methods, and security benefits.

The benefits of the Application proxy are:

1. Increased security over just exposing an ignition port directly.
2. I can expose just one project on the gateway without any of the other project accessable, by mapping only the project url: [https://mysite.com:8043/data/perspective/client/myproject/](https://mysite.com:8043/data/perspective/client/myproject/)

The Application Proxy is essentially a reverse proxy with a few more features.  
The project is already configured with ssl and an identity provider.  
I currently use a VPN but this change is to make it more accessable to many of the mobile users.

I’m looking for advice on:

1. Will this work?
2. Is this a valid and secure solution?
3. Has anyone done this before and what are the pitfalls?

Any advice appreciated.

---

<div class="post-metadata">

**Author:** ![neill](https://avatars.discourse-cdn.com/v4/letter/n/edb3f5/32.png) [@neill](https://forum.inductiveautomation.com/u/neill)\
**Post date:** [February 27, 2020, 9:18pm UTC](https://forum.inductiveautomation.com/t/azure-application-proxy/32611/2 "2020-02-27T21:18:33Z")

</div>

Looking to use this myself. Although I have not attempted to make it work just yet, I am fairly confident it would.  
I found this video below illustrates the user management side of things really well:

If you have any success I would like to hear.

---

<div class="post-metadata">

**Author:** ![DavidWisely](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/davidwisely/32/10482_2.png) [@DavidWisely](https://forum.inductiveautomation.com/u/DavidWisely)\
**Post date:** [February 27, 2020, 11:09pm UTC](https://forum.inductiveautomation.com/t/azure-application-proxy/32611/3 "2020-02-27T23:09:07Z")

</div>

Thanks neill. I’m going to give it a go in a week or two. I’ll let you know how it goes.

---

<div class="post-metadata">

**Author:** ![mcarritt1](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/mcarritt1/32/4262_2.png) [@mcarritt1](https://forum.inductiveautomation.com/u/mcarritt1)\
**Post date:** [July 28, 2020, 9:33am UTC](https://forum.inductiveautomation.com/t/azure-application-proxy/32611/4 "2020-07-28T09:33:20Z")

</div>

How’d it go? Interested about doing this in the future. Currently going the VPN route.

---

<div class="post-metadata">

**Author:** ![DavidWisely](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/davidwisely/32/10482_2.png) [@DavidWisely](https://forum.inductiveautomation.com/u/DavidWisely)\
**Post date:** [July 28, 2020, 11:26pm UTC](https://forum.inductiveautomation.com/t/azure-application-proxy/32611/5 "2020-07-28T23:26:12Z")

</div>

I never got it working as it relies on the IT dept. and they are understaffed and have too many projects of their own to help. I still want to do this, but it’ll have to wait for the moment.

---

<div class="post-metadata">

**Author:** ![Jeff\_Okragly](https://avatars.discourse-cdn.com/v4/letter/j/e274bd/32.png) [@Jeff\_Okragly](https://forum.inductiveautomation.com/u/Jeff_Okragly)\
**Post date:** [September 7, 2022, 6:56pm UTC](https://forum.inductiveautomation.com/t/azure-application-proxy/32611/6 "2022-09-07T18:56:21Z")

</div>

I successfully got Ignition Perspective working via the Azure App Proxy. We have tested via the Android Mobile app.  
The key was I had to toggle the authentication option to pass-thru.

---

<div class="post-metadata">

**Author:** ![erik.forsgren](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/erik.forsgren/32/14156_2.png) [@erik.forsgren](https://forum.inductiveautomation.com/u/erik.forsgren)\
**Post date:** [January 20, 2023, 9:01am UTC](https://forum.inductiveautomation.com/t/azure-application-proxy/32611/7 "2023-01-20T09:01:23Z")

</div>

Hi!  
I am trying this as well but in ios.  
Is the pass-thru in Ignition or in Azure?  
/Erik

---

<div class="post-metadata">

**Author:** ![Jeff\_Okragly](https://avatars.discourse-cdn.com/v4/letter/j/e274bd/32.png) [@Jeff\_Okragly](https://forum.inductiveautomation.com/u/Jeff_Okragly)\
**Post date:** [January 27, 2023, 1:40pm UTC](https://forum.inductiveautomation.com/t/azure-application-proxy/32611/8 "2023-01-27T13:40:27Z")

</div>

Although toggling the authentication option to pass-thru worked, it actually opens this application up to the world. I DO NOT RECOMMEND THIS SETTING. We have reverted back to Azure Active Directory Pre Authentication which adds the layer of Security required for us to expose this MES to the Internet allowing Mobile Devices to use the App have not been able to get this to work.

---

<div class="post-metadata">

**Author:** ![diamond](https://avatars.discourse-cdn.com/v4/letter/d/e79b87/32.png) [@diamond](https://forum.inductiveautomation.com/u/diamond)\
**Post date:** [March 28, 2025, 3:14pm UTC](https://forum.inductiveautomation.com/t/azure-application-proxy/32611/9 "2025-03-28T15:14:16Z")

</div>

So, with the pass-thru disabled, I assume it is not possible to add a project in the Ignition Perspective app, right?

---

<div class="post-metadata">

**Author:** ![diamond](https://avatars.discourse-cdn.com/v4/letter/d/e79b87/32.png) [@diamond](https://forum.inductiveautomation.com/u/diamond)\
**Post date:** [March 31, 2025, 3:25pm UTC](https://forum.inductiveautomation.com/t/azure-application-proxy/32611/10 "2025-03-31T15:25:29Z")

</div>

Did you have success implementing Azure Proxy?

---

<div class="post-metadata">

**Author:** ![DavidWisely](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/davidwisely/32/10482_2.png) [@DavidWisely](https://forum.inductiveautomation.com/u/DavidWisely)\
**Post date:** [April 9, 2025, 10:26pm UTC](https://forum.inductiveautomation.com/t/azure-application-proxy/32611/11 "2025-04-09T22:26:17Z")

</div>

I never did. I got distracted by other projects.

---

<div class="post-metadata">

**Author:** ![diamond](https://avatars.discourse-cdn.com/v4/letter/d/e79b87/32.png) [@diamond](https://forum.inductiveautomation.com/u/diamond)\
**Post date:** [April 10, 2025, 5:13am UTC](https://forum.inductiveautomation.com/t/azure-application-proxy/32611/12 "2025-04-10T05:13:46Z")

</div>

Thanks. I finally got it working but know I am experimenting high latencies.
