{"id":9930,"date":"2025-05-13T14:04:15","date_gmt":"2025-05-13T12:04:15","guid":{"rendered":"https:\/\/aboveit.fi\/browser-applications-securely-deployed\/"},"modified":"2025-12-01T15:05:51","modified_gmt":"2025-12-01T13:05:51","slug":"browser-applications-securely-deployed","status":"publish","type":"post","link":"https:\/\/aboveit.fi\/en\/browser-applications-securely-deployed\/","title":{"rendered":"Browser applications securely deployed"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-post\" data-elementor-id=\"9930\" class=\"elementor elementor-9930 elementor-6777\" data-elementor-post-type=\"post\">\n\t\t\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-2e2f329 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"2e2f329\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-6731a88\" data-id=\"6731a88\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-0b2cc1b elementor-widget elementor-widget-text-editor\" data-id=\"0b2cc1b\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><em>Microsoft&#8217;s Entra Application Proxy, or App Proxy for short, securely publishes browser-based applications from the local environment. Publishing services to the public network always involves risks, which is why publishing services through a Virtual Private Network (VPN) has become an established practice. Did you know that with modern methods, you can publish applications to work without a VPN connection? <g id=\"gid_0\"><g id=\"gid_1\">Microsoft&#8217;s Entra Application Proxy<\/g><\/g> enables the publication of HTTP-based applications to end-users without VPN connections or inbound open ports. What exactly is this about?   <\/em><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-78f4937 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"78f4937\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-2f55e10\" data-id=\"2f55e10\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-0dbc53f elementor-widget elementor-widget-heading\" data-id=\"0dbc53f\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Operating principle<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-d9eb2a1 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"d9eb2a1\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-b0b090c\" data-id=\"b0b090c\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-7b004e3 elementor-widget elementor-widget-text-editor\" data-id=\"7b004e3\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>The operating principle of App Proxy is simple:<\/p>\n<ol>\n<li>User authenticates against Entra ID<\/li>\n<li>Application request is sent to the App Proxy cloud service with Entra ID authentication<\/li>\n<li>App Proxy cloud service forwards the application request to the App Proxy Connector installed on Windows Server<\/li>\n<li>App Proxy Connector forwards the application request to the application server<\/li>\n<li>Application server processes the request and sends a response to the App Proxy Connector<\/li>\n<li>App Proxy Connector forwards the received response to the App Proxy cloud service, which delivers it to the user<\/li>\n<\/ol>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-675ec43 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"675ec43\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-8505d91\" data-id=\"8505d91\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-6941859 elementor-widget elementor-widget-image\" data-id=\"6941859\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img fetchpriority=\"high\" decoding=\"async\" width=\"800\" height=\"189\" src=\"https:\/\/aboveit.fi\/wp-content\/uploads\/2025\/05\/diagram-export-12-05-2025-11.05.42-1024x242.jpg\" class=\"attachment-large size-large wp-image-9931\" alt=\"Diagram illustrating the operating principle of AppProxy\" srcset=\"https:\/\/aboveit.fi\/wp-content\/uploads\/2025\/05\/diagram-export-12-05-2025-11.05.42-1024x242.jpg 1024w, https:\/\/aboveit.fi\/wp-content\/uploads\/2025\/05\/diagram-export-12-05-2025-11.05.42-300x71.jpg 300w, https:\/\/aboveit.fi\/wp-content\/uploads\/2025\/05\/diagram-export-12-05-2025-11.05.42-768x182.jpg 768w, https:\/\/aboveit.fi\/wp-content\/uploads\/2025\/05\/diagram-export-12-05-2025-11.05.42-1536x363.jpg 1536w, https:\/\/aboveit.fi\/wp-content\/uploads\/2025\/05\/diagram-export-12-05-2025-11.05.42.jpg 1920w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-46f9706 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"46f9706\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-bccf7ed\" data-id=\"bccf7ed\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-573d82c elementor-widget elementor-widget-text-editor\" data-id=\"573d82c\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>App Proxy thus enables us to publish HTTP-based applications to users without opening open connections to the server from the public network, in such a way that the user must be authenticated to Entra ID for the connection to the application server to open. Unauthenticated users therefore do not see the content produced by the application server at all before the user has successfully authenticated. <\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-31d3cf3 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"31d3cf3\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-6694fe5\" data-id=\"6694fe5\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-7f89ef9 elementor-widget elementor-widget-heading\" data-id=\"7f89ef9\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">User experience and usage management<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-cedcb0c elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"cedcb0c\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-734fe18\" data-id=\"734fe18\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-b1425c6 elementor-widget elementor-widget-text-editor\" data-id=\"b1425c6\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>What does App Proxy look like from the user&#8217;s perspective? The user experience between native and App Proxy is almost identical. The difference with App Proxy is that it forces the user to log in with Entra ID and the application has a different URL address. The public address generated by App Proxy can be replaced by using a custom address using a CNAME record.   <\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-0adece9 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"0adece9\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-3089971\" data-id=\"3089971\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-4f86b3a elementor-widget elementor-widget-image\" data-id=\"4f86b3a\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t<figure class=\"wp-caption\">\n\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" width=\"768\" height=\"432\" src=\"https:\/\/aboveit.fi\/wp-content\/uploads\/2025\/05\/image-768x432.jpg\" class=\"attachment-medium_large size-medium_large wp-image-9934\" alt=\"\" srcset=\"https:\/\/aboveit.fi\/wp-content\/uploads\/2025\/05\/image-768x432.jpg 768w, https:\/\/aboveit.fi\/wp-content\/uploads\/2025\/05\/image-300x169.jpg 300w, https:\/\/aboveit.fi\/wp-content\/uploads\/2025\/05\/image-1024x576.jpg 1024w, https:\/\/aboveit.fi\/wp-content\/uploads\/2025\/05\/image-1536x864.jpg 1536w, https:\/\/aboveit.fi\/wp-content\/uploads\/2025\/05\/image.jpg 1920w\" sizes=\"(max-width: 768px) 100vw, 768px\" \/>\t\t\t\t\t\t\t\t\t\t\t<figcaption class=\"widget-image-caption wp-caption-text\">Image: App Proxy user experience<\/figcaption>\n\t\t\t\t\t\t\t\t\t\t<\/figure>\n\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-1a39517 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"1a39517\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-b4ff26e\" data-id=\"b4ff26e\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-ee0e21a elementor-widget elementor-widget-text-editor\" data-id=\"ee0e21a\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>App Proxy applications become Enterprise Apps for Entra ID, meaning they have access management through Entra ID groups and users. App Proxy applications also support Conditional Access rules, meaning that logging into the application can be restricted, for example, only to devices joined to Microsoft Intune or allow login only from a specific IP address. <\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-a93ed59 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"a93ed59\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-e24cb14\" data-id=\"e24cb14\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-35c8368 elementor-widget elementor-widget-heading\" data-id=\"35c8368\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Implementing application protection?<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-2209bf0 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"2209bf0\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-19ad0a1\" data-id=\"19ad0a1\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-afa54fe elementor-widget elementor-widget-text-editor\" data-id=\"afa54fe\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Entra Application Proxy is included in a remarkably wide range of Microsoft 365 licenses. App Proxy requires an Entra ID P1 license, so for example, Business Premium, M365 E3, M365 F1, and M365 F3 entitle you to use the App Proxy feature without purchasing additional licenses. <\/p>\n<p>However, App Proxy technology is not limited to publishing HTTP-based applications only. The same underlying technology works as part of <g id=\"gid_0\"><g id=\"gid_1\">Microsoft&#8217;s Global Secure Access<\/g><\/g> solution, especially in the <g id=\"gid_2\"><g id=\"gid_3\">Entra Private Access<\/g><\/g> service. Entra Private Access extends the secure, identity-based access provided by App Proxy to applications that are not behind an HTTP interface.  <\/p>\n<p>Unlike traditional App Proxy, which is designed specifically for publishing web applications, Entra Private Access enables access to all internal network applications that use TCP or UDP protocols. This means that, for example, SMB, RDP, SSH, and database connections can also be secured and published without VPN solutions or opening firewall ports to the public network. <\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-c86fb46 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"c86fb46\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-57d8bad\" data-id=\"57d8bad\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-7911303 elementor-widget elementor-widget-text-editor\" data-id=\"7911303\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><em>Sometimes the easiest way to implement can be more cost-effective than you might think. Technical solutions may be implementable by utilizing existing licenses more efficiently. If you had your own &#8216;consigliere&#8217;, these matters might be clear to you and more quickly achievable. <\/em><em>Our Microsoft Solution Partner status in the Security category is a sign that we are the right partner when you&#8217;re looking for real expertise to support your IT administration!<\/em><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>Microsoft&#8217;s Entra Application Proxy, or App Proxy for short, securely publishes browser-based applications from the local environment. Publishing services to the public network always involves risks, which is why publishing services through a Virtual Private Network (VPN) has become an established practice. Did you know that with modern methods, you can publish applications to work [&hellip;]<\/p>\n","protected":false},"author":9,"featured_media":9933,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"content-type":"","inline_featured_image":false,"footnotes":""},"categories":[218,236,231],"tags":[357,487,282,363,237],"class_list":["post-9930","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cybersecurity","category-microsoft-365","category-technologies","tag-applications","tag-appproxy","tag-entra","tag-knowledge-work","tag-microsoft365"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.5 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Browser applications securely deployed - Above IT Oy<\/title>\n<meta name=\"description\" content=\"App Proxy securely publishes browser-based applications from the local IT environment through Entra. Read Matias&#039;s blog!\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/aboveit.fi\/en\/browser-applications-securely-deployed\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Browser applications securely deployed - Above IT Oy\" \/>\n<meta property=\"og:description\" content=\"App Proxy securely publishes browser-based applications from the local IT environment through Entra. Read Matias&#039;s blog!\" \/>\n<meta property=\"og:url\" content=\"https:\/\/aboveit.fi\/en\/browser-applications-securely-deployed\/\" \/>\n<meta property=\"og:site_name\" content=\"Above IT Oy\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/aboveitfi\" \/>\n<meta property=\"article:published_time\" content=\"2025-05-13T12:04:15+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-12-01T13:05:51+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/aboveit.fi\/wp-content\/uploads\/2025\/05\/AboveIT-Matias-6-e1747137833128.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1280\" \/>\n\t<meta property=\"og:image:height\" content=\"1280\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Matias Haapaniemi\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Matias Haapaniemi\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/aboveit.fi\\\/en\\\/browser-applications-securely-deployed\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/aboveit.fi\\\/en\\\/browser-applications-securely-deployed\\\/\"},\"author\":{\"name\":\"Matias Haapaniemi\",\"@id\":\"https:\\\/\\\/aboveit.fi\\\/en\\\/#\\\/schema\\\/person\\\/d4a53cbdd8698810ce4da0615fac49f0\"},\"headline\":\"Browser applications securely deployed\",\"datePublished\":\"2025-05-13T12:04:15+00:00\",\"dateModified\":\"2025-12-01T13:05:51+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/aboveit.fi\\\/en\\\/browser-applications-securely-deployed\\\/\"},\"wordCount\":605,\"publisher\":{\"@id\":\"https:\\\/\\\/aboveit.fi\\\/en\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/aboveit.fi\\\/en\\\/browser-applications-securely-deployed\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/aboveit.fi\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/AboveIT-Matias-6-e1747137833128.jpg\",\"keywords\":[\"applications\",\"AppProxy\",\"Entra\",\"Knowledge work\",\"microsoft365\"],\"articleSection\":[\"Cybersecurity\",\"Microsoft 365\",\"Technologies\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/aboveit.fi\\\/en\\\/browser-applications-securely-deployed\\\/\",\"url\":\"https:\\\/\\\/aboveit.fi\\\/en\\\/browser-applications-securely-deployed\\\/\",\"name\":\"Browser applications securely deployed - Above IT Oy\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/aboveit.fi\\\/en\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/aboveit.fi\\\/en\\\/browser-applications-securely-deployed\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/aboveit.fi\\\/en\\\/browser-applications-securely-deployed\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/aboveit.fi\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/AboveIT-Matias-6-e1747137833128.jpg\",\"datePublished\":\"2025-05-13T12:04:15+00:00\",\"dateModified\":\"2025-12-01T13:05:51+00:00\",\"description\":\"App Proxy securely publishes browser-based applications from the local IT environment through Entra. Read Matias's blog!\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/aboveit.fi\\\/en\\\/browser-applications-securely-deployed\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/aboveit.fi\\\/en\\\/browser-applications-securely-deployed\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/aboveit.fi\\\/en\\\/browser-applications-securely-deployed\\\/#primaryimage\",\"url\":\"https:\\\/\\\/aboveit.fi\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/AboveIT-Matias-6-e1747137833128.jpg\",\"contentUrl\":\"https:\\\/\\\/aboveit.fi\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/AboveIT-Matias-6-e1747137833128.jpg\",\"width\":1280,\"height\":1280},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/aboveit.fi\\\/en\\\/browser-applications-securely-deployed\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Etusivu\",\"item\":\"https:\\\/\\\/aboveit.fi\\\/en\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Browser applications securely deployed\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/aboveit.fi\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/aboveit.fi\\\/en\\\/\",\"name\":\"We Are Above IT\",\"description\":\"Tietohallinnon voimavarakumppani\",\"publisher\":{\"@id\":\"https:\\\/\\\/aboveit.fi\\\/en\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/aboveit.fi\\\/en\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/aboveit.fi\\\/en\\\/#organization\",\"name\":\"Above IT Oy\",\"url\":\"https:\\\/\\\/aboveit.fi\\\/en\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/aboveit.fi\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/aboveit.fi\\\/wp-content\\\/uploads\\\/2024\\\/10\\\/aboveIT-logo.png\",\"contentUrl\":\"https:\\\/\\\/aboveit.fi\\\/wp-content\\\/uploads\\\/2024\\\/10\\\/aboveIT-logo.png\",\"width\":1613,\"height\":383,\"caption\":\"Above IT Oy\"},\"image\":{\"@id\":\"https:\\\/\\\/aboveit.fi\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/aboveitfi\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/aboveitfi\",\"https:\\\/\\\/instagram.com\\\/aboveitfi\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/aboveit.fi\\\/en\\\/#\\\/schema\\\/person\\\/d4a53cbdd8698810ce4da0615fac49f0\",\"name\":\"Matias Haapaniemi\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/62a88c40ff59fa65af0446f9fed83102baf125a315973ea874297af43da02528?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/62a88c40ff59fa65af0446f9fed83102baf125a315973ea874297af43da02528?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/62a88c40ff59fa65af0446f9fed83102baf125a315973ea874297af43da02528?s=96&d=mm&r=g\",\"caption\":\"Matias Haapaniemi\"},\"sameAs\":[\"https:\\\/\\\/aboveit.fi\"],\"url\":\"https:\\\/\\\/aboveit.fi\\\/en\\\/author\\\/matias-haapaniemiaboveit-fi\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Browser applications securely deployed - Above IT Oy","description":"App Proxy securely publishes browser-based applications from the local IT environment through Entra. Read Matias's blog!","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/aboveit.fi\/en\/browser-applications-securely-deployed\/","og_locale":"en_US","og_type":"article","og_title":"Browser applications securely deployed - Above IT Oy","og_description":"App Proxy securely publishes browser-based applications from the local IT environment through Entra. Read Matias's blog!","og_url":"https:\/\/aboveit.fi\/en\/browser-applications-securely-deployed\/","og_site_name":"Above IT Oy","article_publisher":"https:\/\/www.facebook.com\/aboveitfi","article_published_time":"2025-05-13T12:04:15+00:00","article_modified_time":"2025-12-01T13:05:51+00:00","og_image":[{"width":1280,"height":1280,"url":"https:\/\/aboveit.fi\/wp-content\/uploads\/2025\/05\/AboveIT-Matias-6-e1747137833128.jpg","type":"image\/jpeg"}],"author":"Matias Haapaniemi","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Matias Haapaniemi","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/aboveit.fi\/en\/browser-applications-securely-deployed\/#article","isPartOf":{"@id":"https:\/\/aboveit.fi\/en\/browser-applications-securely-deployed\/"},"author":{"name":"Matias Haapaniemi","@id":"https:\/\/aboveit.fi\/en\/#\/schema\/person\/d4a53cbdd8698810ce4da0615fac49f0"},"headline":"Browser applications securely deployed","datePublished":"2025-05-13T12:04:15+00:00","dateModified":"2025-12-01T13:05:51+00:00","mainEntityOfPage":{"@id":"https:\/\/aboveit.fi\/en\/browser-applications-securely-deployed\/"},"wordCount":605,"publisher":{"@id":"https:\/\/aboveit.fi\/en\/#organization"},"image":{"@id":"https:\/\/aboveit.fi\/en\/browser-applications-securely-deployed\/#primaryimage"},"thumbnailUrl":"https:\/\/aboveit.fi\/wp-content\/uploads\/2025\/05\/AboveIT-Matias-6-e1747137833128.jpg","keywords":["applications","AppProxy","Entra","Knowledge work","microsoft365"],"articleSection":["Cybersecurity","Microsoft 365","Technologies"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/aboveit.fi\/en\/browser-applications-securely-deployed\/","url":"https:\/\/aboveit.fi\/en\/browser-applications-securely-deployed\/","name":"Browser applications securely deployed - Above IT Oy","isPartOf":{"@id":"https:\/\/aboveit.fi\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/aboveit.fi\/en\/browser-applications-securely-deployed\/#primaryimage"},"image":{"@id":"https:\/\/aboveit.fi\/en\/browser-applications-securely-deployed\/#primaryimage"},"thumbnailUrl":"https:\/\/aboveit.fi\/wp-content\/uploads\/2025\/05\/AboveIT-Matias-6-e1747137833128.jpg","datePublished":"2025-05-13T12:04:15+00:00","dateModified":"2025-12-01T13:05:51+00:00","description":"App Proxy securely publishes browser-based applications from the local IT environment through Entra. Read Matias's blog!","breadcrumb":{"@id":"https:\/\/aboveit.fi\/en\/browser-applications-securely-deployed\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/aboveit.fi\/en\/browser-applications-securely-deployed\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/aboveit.fi\/en\/browser-applications-securely-deployed\/#primaryimage","url":"https:\/\/aboveit.fi\/wp-content\/uploads\/2025\/05\/AboveIT-Matias-6-e1747137833128.jpg","contentUrl":"https:\/\/aboveit.fi\/wp-content\/uploads\/2025\/05\/AboveIT-Matias-6-e1747137833128.jpg","width":1280,"height":1280},{"@type":"BreadcrumbList","@id":"https:\/\/aboveit.fi\/en\/browser-applications-securely-deployed\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Etusivu","item":"https:\/\/aboveit.fi\/en\/"},{"@type":"ListItem","position":2,"name":"Browser applications securely deployed"}]},{"@type":"WebSite","@id":"https:\/\/aboveit.fi\/en\/#website","url":"https:\/\/aboveit.fi\/en\/","name":"We Are Above IT","description":"Tietohallinnon voimavarakumppani","publisher":{"@id":"https:\/\/aboveit.fi\/en\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/aboveit.fi\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/aboveit.fi\/en\/#organization","name":"Above IT Oy","url":"https:\/\/aboveit.fi\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/aboveit.fi\/en\/#\/schema\/logo\/image\/","url":"https:\/\/aboveit.fi\/wp-content\/uploads\/2024\/10\/aboveIT-logo.png","contentUrl":"https:\/\/aboveit.fi\/wp-content\/uploads\/2024\/10\/aboveIT-logo.png","width":1613,"height":383,"caption":"Above IT Oy"},"image":{"@id":"https:\/\/aboveit.fi\/en\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/aboveitfi","https:\/\/www.linkedin.com\/company\/aboveitfi","https:\/\/instagram.com\/aboveitfi"]},{"@type":"Person","@id":"https:\/\/aboveit.fi\/en\/#\/schema\/person\/d4a53cbdd8698810ce4da0615fac49f0","name":"Matias Haapaniemi","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/62a88c40ff59fa65af0446f9fed83102baf125a315973ea874297af43da02528?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/62a88c40ff59fa65af0446f9fed83102baf125a315973ea874297af43da02528?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/62a88c40ff59fa65af0446f9fed83102baf125a315973ea874297af43da02528?s=96&d=mm&r=g","caption":"Matias Haapaniemi"},"sameAs":["https:\/\/aboveit.fi"],"url":"https:\/\/aboveit.fi\/en\/author\/matias-haapaniemiaboveit-fi\/"}]}},"_links":{"self":[{"href":"https:\/\/aboveit.fi\/en\/wp-json\/wp\/v2\/posts\/9930","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/aboveit.fi\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/aboveit.fi\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/aboveit.fi\/en\/wp-json\/wp\/v2\/users\/9"}],"replies":[{"embeddable":true,"href":"https:\/\/aboveit.fi\/en\/wp-json\/wp\/v2\/comments?post=9930"}],"version-history":[{"count":1,"href":"https:\/\/aboveit.fi\/en\/wp-json\/wp\/v2\/posts\/9930\/revisions"}],"predecessor-version":[{"id":9935,"href":"https:\/\/aboveit.fi\/en\/wp-json\/wp\/v2\/posts\/9930\/revisions\/9935"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/aboveit.fi\/en\/wp-json\/wp\/v2\/media\/9933"}],"wp:attachment":[{"href":"https:\/\/aboveit.fi\/en\/wp-json\/wp\/v2\/media?parent=9930"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/aboveit.fi\/en\/wp-json\/wp\/v2\/categories?post=9930"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/aboveit.fi\/en\/wp-json\/wp\/v2\/tags?post=9930"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}