Today we are announcing two small capabilities that will help you improve the experience of using proxy applications:

Changing the application icon

You can now change the icon for the proxy applications in the same manner you can do that for other applications in Azure AD.! Just upload your icon and it will be presented in the access panel (http://myapps.microsoft.com/).

Define who gets to see passthrough applications

In the past, passthrough applications were shown to all users in the Access Panel. We heard feedback from you that this created an overloaded experience in the portal. Many of you want to publish protocols like Intune NDES/SCEP and don’t want their users to see these icons. Therefore, we have changed the default behavior for passthrough applications: from now on, only users that are assigned to the application directly or via groups will see the icon of that application in the portal just like other applications.

Keep in mind that when it comes to passthrough applications, assignment only affect the presentation of the application icon in the portal, as the user identity is not verified before the request is sent to the backend like it is for preauthentication apps.

Have all of this in Office365 App Launcher

All of the above applies both to the Azure AD Access Panel that is accessible via http://myapps.microsoft.com/ and also to the Office 365 App Launcher that also includes proxy applications. Your users can go to all their work applications without leaving Office 365 screens.