This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(217.60000000000002, 85%, 31%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESD%3C/text%3E%3C/svg%3E)
I have Rest API developed using Django Rest Framework, which is running in an internal corporate server and make public using Microsoft Application Proxy (Pre-Authentication enabled using Microsoft Entra ID).
I have followed the steps mentioned here
https://learn.microsoft.com/en-us/azure/active-directory-b2c/configure-authentication-sample-android-app?tabs=kotlin
https://learn.microsoft.com/en-us/entra/identity/app-proxy/application-proxy-configure-single-sign-on-with-headers
I have enabled Azure OAuth SSO in my React Native App with react-native-app-auth https://commerce.nearform.com/open-source/react-native-app-auth/docs/providers/azure-active-directory
SSO is working fine and I'm able to get the access_token and passing the access_token in Authorization Header as Bearer Token. I was expecting from the docs, this will not throw Entra login screen, but it is and therefore I'm unable to call the API.
But I also added a WebView in the app, from there I'm logging in with Azure AD SSO which is working.
Once I login to the Django App from the WebView, I'm able to call the Rest API.
I'm not sure why I need to login via WebView once to call the API, my though was enabling Header Based SSO and passing the access token should be enough. But it is not working as expected.
Already, spent several weeks on this and help will be appreciated. Thanks.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(278.4, 45%, 36%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAV%3C/text%3E%3C/svg%3E)
Hi @Sohan Dutta
Thank you for posting in Microsoft Q&A Forum!
If I understand correctly, you have developed an API which is running internal corporate server, and you would like to make public using Microsoft Entra Application Proxy.
From the documents which you have followed Configure authentication in a sample Android app by using Azure AD B2C it is for Azure AD B2C tenant.
the other document is Header-based single sign-on (SSO) for on-premises apps with Microsoft Entra application proxy
In general Microsoft Entra Application Proxy is worked for Microsoft Entra ID tenant not the Azure AD B2C tenant.
This could be the cause of the issue you're experiencing. I would suggest reviewing the documentation for the solution you are using to ensure that it is compatible with Azure AD B2C.
I have gone through the documentation and have implemented all relevant changes, but still facing the same issue.
The main issue that I'm facing the REST API which I have published through Application Proxy is accessible from mobile Edge browser (work profile). But when I try to reach it from the app, it throws the Entra challenge which is not suppose to happen, since I'm passing the access token in header
Hi @Sohan Dutta
We haven’t heard from you on the last response and was just checking back to see if you have a resolution yet. In case if you have any resolution please do share that same with the community as it can be helpful to others. Otherwise, will respond with more details and we will try to help.
Hi @Sohan Dutta We haven’t heard from you on the last response and was just checking back to see if you have a resolution yet. In case if you have any resolution please do share that same with the community as it can be helpful to others. Otherwise, will respond with more details and we will try to help.
Hi @Sohan Dutta
seems your ask is not possible, because Microsoft Entra Application Proxy and Azure AD B2C are two different things. Microsoft Entra Application Proxy provides secure remote access to on-premises web applications for work force tenant (Microsoft Entra ID) which is work for internal organization. whereas Azure AD B2C is another tenant which is for external users, login with their preferred social, enterprise, or local account identities.
The Azure AD B2C is not compatible to Microsoft Entra Application Proxy.