StudyToCert

All certifications / SC-300 / Lessons

Microsoft Certified: Identity and Access Administrator Associate SC-300 (skills outline of April 27, 2026) · Domain 3: Plan and implement workload identities

Microsoft Entra application proxy and private network connectors for on-premises web apps

▶ Watch the overview video

Last reviewed September 25, 2026 · Leer en español

Many organizations still run web apps on-premises, such as an intranet, an expense system or a SharePoint Server farm. Microsoft Entra application proxy publishes these apps to remote users securely, without a VPN and without opening inbound firewall ports. Users sign in with Microsoft Entra ID, so Conditional Access, MFA and sign-in logs apply to legacy apps just as they do to cloud apps.

Free account

Keep reading for free

Create a free StudyToCert account to read the rest of this lesson: 5 more sections, 5 key terms, a real-world example, an exam tip and self-check questions. Every lesson, lab and practice test is free with an account.

Sign up free Log in

Study SC-300 for free
A week-by-week plan with every lesson, quizzes, checkpoint tests, a practice exam and hands-on labs.
Open the SC-300 study plan