web
You’re offline. This is a read only version of the page.
close
Skip to main content

Notifications

Announcements

Season of Giving Solutions is Here!
News and Announcements icon
Community site session details

Community site session details

Session Id :
Dynamics 365 Community / Forums / Small and medium business | Business Central, N... / Business Central AppPr...
Small and medium business | Business Central, N...
Suggested Answer

Business Central AppProxy Issue

(6) ShareShare
ReportReport
Posted on by JR-11061107-0 12
Hi
 
We have on-prem Business Central installations, and want to be able to grant access to people outside the office through Entra AppProxy.
 
The connections seems to work just fine, cause if i use the Business Central APP with the URL from AppProxy on a iPad, i can log in just fine.
 
But when we try to access the same URL from an edge browser or other brands of browser, we just see this.
 
 
If i use the URL internally it works just fine, so it has something todo with the AppProxy usage some how.
 
 
 
 
Categories:
Dynamics 365 Business Central
I have the same question (0)
  • Suggested answer
    Holly Huffman Profile Picture
    Holly Huffman 6,538 Super User 2025 Season 2 on at
    Good morning, afternoon, or evening depending on your location :)
    Hope you are well today!
     
    I see this post was from a while ago - so hoping you've resolved already - but incase not :)
     
    The message you're seeing:
    "We paused while you were away. Please refresh to continue."
    …is a session timeout message from Business Central, not a direct error from Azure AD Application Proxy (AppProxy). However, the fact that this appears immediately when accessing the AppProxy URL from a browser (but not from the iPad app) suggests a few possible causes related to session handling or authentication flow in the browser environment.
     
    Likely Causes
    1. Session Cookie Handling via AppProxy:
      • AppProxy may not be correctly passing session cookies or headers when accessed via a browser.
      • This can cause Business Central to think the session is inactive or expired.
    2. Browser vs. App Behavior:
      • The Business Central mobile app may handle authentication tokens differently (e.g., persistent sessions or silent token refresh).
      • Browsers may block or mishandle cookies due to SameSite or cross-origin restrictions.
    3. Missing or Misconfigured AppProxy Settings:
      • The AppProxy application may not have Persistent Cookies or Header-based authentication properly configured.
      • Pre-authentication might be interfering with the BC session.
     
    Recommended Actions
    1. Check AppProxy Configuration:
      • In the Azure Portal, go to Azure AD > Enterprise Applications > Your AppProxy App.
      • Under Application Proxy, ensure:
        • Pre-authentication is set to Azure Active Directory.
        • Use Persistent Cookies is enabled.
        • Backend Application Timeout is set appropriately (e.g., 60 minutes or more).
    2. Test in Incognito Mode:
      • Try accessing the AppProxy URL in a private/incognito browser window to rule out cookie or cache issues.
    3. Compare Headers:
      • Use browser dev tools (F12) to inspect the request/response headers and compare them to the iPad app behavior.
      • Look for missing or blocked cookies.
    4. Enable Logging:
      • Enable diagnostic logging in AppProxy and Business Central to trace session handling.
     
    Optional Workaround
    If the issue persists only in browsers, consider:
    • Using OAuth2-based authentication with token refresh support.
    • Creating a dedicated external access app with adjusted session handling.

    Note: I collaborated with Copilot to help craft this response for clarity and completeness.
    Hope this helps some!
  • Suggested answer
    Jeffrey Bulanadi Profile Picture
    Jeffrey Bulanadi 8,762 on at

    Hi,

    You're trying to expose your on-prem BC installation to external users using Microsoft Entra Application Proxy, and while the mobile app works fine with the AppProxy URL, browser access (Edge and others) fails—despite internal access working perfectly.

    This behavior is consistent with known limitations around AppProxy and BC’s web client. Here's what’s likely happening and how to approach it:

     

    Why the browser fails but the app works

    • Business Central’s web client relies on WebSocket communication, which has historically been incompatible or unstable with Entra AppProxy in certain configurations.
    • The mobile app may bypass some of these constraints or use different protocols, which explains why it works while browser access stalls or shows a blank page.
     

    What you can try

    1. Confirm WebSocket support is enabled in your AppProxy connector settings.
      • Microsoft has improved WebSocket support, but it may still be limited depending on your connector version and infrastructure.
      • You can review this in the connector’s advanced settings.
    2. Check authentication flow
      • If you're using Windows Auth or SOAP integrations, Entra ID authentication may not fully pass through.
      • Consider using Kerberos Constrained Delegation or switching to Forms-based auth if supported.
    3. Review session persistence and headers
      • AppProxy sometimes drops session cookies or headers needed for BC’s web client to load properly.
      • Use browser dev tools to inspect what’s being blocked or redirected.
    4. Alternative access methods
      • If AppProxy continues to block browser access, consider publishing BC via Windows Web Application Proxy (WAP) or a reverse proxy with full WebSocket support, like Azure Front Door or NGINX.
     

    Here’s a helpful link showing how to troubleshoot AppProxy access issues and WebSocket compatibility:

    Troubleshoot Application Proxy – Microsoft Learn
    Deployment Scenarios – Business Central
    Stefano Demiliani – Business Central and AppProxy


    If you find this helpful, feel free to mark this as the suggested or verified answer.

    Cheers
    Jeffrey

Under review

Thank you for your reply! To ensure a great experience for everyone, your content is awaiting approval by our Community Managers. Please check back later.

Helpful resources

News and Announcements

Season of Giving Solutions is Here!

Quick Links

Responsible AI policies

As AI tools become more common, we’re introducing a Responsible AI Use…

Neeraj Kumar – Community Spotlight

We are honored to recognize Neeraj Kumar as our Community Spotlight honoree for…

Congratulations to the November Top 10 Community Leaders!

These are the community rock stars!

Leaderboard > Small and medium business | Business Central, NAV, RMS

#1
OussamaSabbouh Profile Picture

OussamaSabbouh 1,688

#2
Khushbu Rajvi. Profile Picture

Khushbu Rajvi. 784 Super User 2025 Season 2

#3
YUN ZHU Profile Picture

YUN ZHU 595 Super User 2025 Season 2

Last 30 days Overall leaderboard

Featured topics

Product updates

Dynamics 365 release plans