For this chapter, we will need a configured second Azure AD with some test users inside. The users need to be licensed with Office 365 E3 or E5 licenses. The tenant and the associated public DNS configuration for the additional custom domain need to be done so that the users can send and receive emails. Chapter 1, Building and Managing Azure Active Directory, provided you with the required technical references to be ready to use the lab configuration in this chapter. Testing the functionality with the Azure AD application proxy requires that you have finished the steps in Chapter 1, Building and Managing Azure Active Directory, or in Chapter 9, Deploying Additional Applications on Azure AD; specifically, the Kerberos application publishing. We will do the configuration to provide external access to on-premise applications for guest users on the YD1APP01 virtual machine, as described in the following diagram:
Lab environment overview
