Skip to content

Commit b74fde2

Browse files
Learn Build Service GitHub AppLearn Build Service GitHub App
authored andcommitted
Merging changes synced from https://github.com/MicrosoftDocs/entra-docs-pr (branch live)
2 parents a998163 + 6b91ffb commit b74fde2

5 files changed

Lines changed: 9 additions & 14 deletions

docs/global-secure-access/concept-explicit-forward-proxy-session-management.md

Lines changed: 1 addition & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -6,13 +6,10 @@ ms.date: 04/06/2026
66
ms.reviewer: alexpav
77
---
88

9-
# Explicit Forward Proxy (preview) session management
9+
# Explicit Forward Proxy session management
1010

1111
Explicit Forward Proxy uses Microsoft Entra ID authentication and authorization to validate user access before allowing network traffic. This validation method allows for adaptive policies in Microsoft Entra Conditional Access, modern credentials like passkeys, and Continuous Access Evaluation with session revocation. Classic proxy authorization methods, such as basic, digest, NTLM, or Kerberos, aren't supported.
1212

13-
> [!IMPORTANT]
14-
> The Explicit Forward Proxy feature is currently in preview. This information relates to a prerelease product that might be substantially modified before release. Microsoft makes no warranties, expressed or implied, with respect to the information provided here.
15-
1613
## Session management settings
1714

1815
Explicit Forward Proxy supports smart session management (enabled by default), HTTP header-based session affinity (can be enabled), IP-based session affinity (enabled by default), and cookie-based session affinity. Available capabilities depend on the affinity method.

docs/global-secure-access/concept-explicit-forward-proxy.md

Lines changed: 1 addition & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,7 @@ ms.date: 04/06/2026
66
ms.reviewer: alexpav
77
---
88

9-
# Explicit Forward Proxy (preview) overview
9+
# Explicit Forward Proxy overview
1010

1111
Explicit Forward Proxy is a traffic acquisition mechanism that's useful in scenarios where installation of the Global Secure Access client is difficult or not possible. Explicit Forward Proxy helps protect internet traffic when users use browsers to access resources from:
1212

@@ -18,9 +18,6 @@ Explicit Forward Proxy is a traffic acquisition mechanism that's useful in scena
1818

1919
Explicit Forward Proxy relies on proxy automatic configuration (PAC) files to configure browsers for Microsoft Entra Internet Access connectivity. It uses the HTTP CONNECT protocol to facilitate network communication between the user and the Microsoft Entra Internet Access service. It uses Microsoft Entra ID and Microsoft Entra Conditional Access to authenticate and authorize user access to internet resources.
2020

21-
> [!IMPORTANT]
22-
> The Explicit Forward Proxy feature is currently in preview. This information relates to a prerelease product that might be substantially modified before release. Microsoft makes no warranties, expressed or implied, with respect to the information provided here.
23-
2421
## Traffic flow
2522

2623
| Step | Details |

docs/global-secure-access/concept-proxy-automatic-configuration-files.md

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -44,6 +44,10 @@ On managed devices, such as those governed by browser policy or enterprise mobil
4444
4545
For unmanaged devices, you can instruct users to manually enter the PAC file location in browser settings or rely on a network-provided configuration. A network-provided configuration might be Dynamic Host Configuration Protocol (DHCP) or Web Proxy Auto-Discovery (WPAD).
4646
47+
## Next steps
48+
49+
- [Learn how to configure custom proxy automatic configuration file hosting](how-to-custom-proxy-file-hosting.md)
50+
4751
## Related content
4852
4953
- [Learn how to configure Explicit Forward Proxy](how-to-configure-explicit-forward-proxy.md)

docs/global-secure-access/how-to-configure-explicit-forward-proxy-headers.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -6,12 +6,12 @@ ms.date: 04/06/2026
66
ms.reviewer: alexpav
77
---
88

9-
# Configure HTTP header session management
9+
# Configure HTTP header session management (preview)
1010

1111
You can configure Explicit Forward Proxy (preview) to rely on the private IP addresses of devices on your network to associate authenticated users with their devices. To use HTTP header session management with Explicit Forward Proxy, you need to securely communicate the private IP address of the device to the Explicit Forward Proxy feature.
1212

1313
> [!IMPORTANT]
14-
> The Explicit Forward Proxy feature is currently in preview. This information relates to a prerelease product that might be substantially modified before release. Microsoft makes no warranties, expressed or implied, with respect to the information provided here.
14+
> The HTTP header session management feature is currently in preview. This information relates to a prerelease product that might be substantially modified before release. Microsoft makes no warranties, expressed or implied, with respect to the information provided here.
1515
1616
## Prerequisites
1717

docs/global-secure-access/how-to-configure-explicit-forward-proxy-intune-policy.md

Lines changed: 1 addition & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -7,13 +7,10 @@ ms.subservice: entra-internet-access
77
ms.reviewer: alexpav
88
---
99

10-
# Configure Microsoft Edge with Explicit Forward Proxy (preview) by using an Intune application management policy
10+
# Configure Microsoft Edge with Explicit Forward Proxy by using an Intune application management policy
1111

1212
You can automatically deliver proxy settings and certificate authority trust settings in Microsoft Edge by using an Intune mobile application management (MAM) policy. The policy can take advantage of the Explicit Forward Proxy feature of Global Secure Access.
1313

14-
> [!IMPORTANT]
15-
> The Explicit Forward Proxy feature is currently in preview. This information relates to a prerelease product that might be substantially modified before release. Microsoft makes no warranties, expressed or implied, with respect to the information provided here.
16-
1714
## Prerequisites
1815

1916
- A Microsoft Entra identity with at least the Global Secure Access Administrator Reader role and Intune Administrator role.

0 commit comments

Comments
 (0)