You need to meet the planned changes and technical requirements for App1. What should you implement?

Azure AD Application Proxy is a feature designed specifically to publish on-premises web applications and make them securely accessible to remote users. It acts as a reverse proxy, allowing users to connect to the on-premises app using their Azure AD credentials for pre-authentication and single sign-on (SSO). This solution meets the technical requirement of providing external access to an internal application without requiring a VPN or exposing the application server directly to the internet.

A. A policy set in Microsoft Endpoint Manager is used for managing device compliance, security settings, and configurations, not for publishing on-premises web applications.

B. An app configuration policy in Microsoft Endpoint Manager is used to deploy settings to managed applications (e.g., Outlook, Edge) on user devices, not for server-side application access.

C. An app registration in Azure AD is a necessary prerequisite for Application Proxy, as it creates an identity for the app, but it is not the complete solution for publishing it.

1. Microsoft Entra documentation. (2023). Plan an Azure Active Directory Application Proxy deployment. Microsoft Learn. Retrieved from https://learn.microsoft.com/en-us/azure/active-directory/app-proxy/application-proxy-deployment-plan. In the "What is Application Proxy?" section

it states

"Azure Active Directory's Application Proxy provides secure remote access to on-premises web applications."

2. Microsoft Entra documentation. (2023). Tutorial: Add an on-premises application for remote access through Application Proxy in Azure Active Directory. Microsoft Learn. Retrieved from https://learn.microsoft.com/en-us/azure/active-directory/app-proxy/application-proxy-add-on-premises-application. Step 1

"Add an on-premises app to Azure AD

" clarifies that you first register the app (related to option C) and then configure the proxy service (option D) to enable access.

3. Microsoft Intune documentation. (2023). App configuration policies for Microsoft Intune. Microsoft Learn. Retrieved from https://learn.microsoft.com/en-us/mem/intune/apps/app-configuration-policies-overview. This document explains that app configuration policies are for client-side apps on managed devices

which is distinct from providing remote access to a web application.