We heard feedback from customers that they need to be able to install the Azure AD Application Proxy connector without using the interactive login UI. It is now possible!
This capability is useful when you want to:
-
Install the connector on machines with no UI layer or when you cannot RDP to the machine.
-
Install and register many connectors at once.
-
Integrate the connector installation and registration as part of another procedure.
-
Create a standard server image that contains the connector bits but is not registered.
The procedure to perform this operation is:
-
Install the connector using a command line or standard silent MSI install. At this stage, you can make an image of the machine and replicate it. Installation does not involve any interaction with the on-line service.
-
The administrator acquires an offline token from Azure AD to use for the registration (we show you how to do this in the documentation).
-
On the connector machine, registration is performed using this token. This is when the connector establishes its connectivity to the service, registers the connector machine and creates a certificate to identify it. When this stage is done, the connector is ready to receive traffic. Alternatively, the admin can enter his credentials as part of the registration process which will acquire the token and register.
For details, see our documentation on Azure.com: https://azure.microsoft.com/en-us/documentation/articles/active-directory-application-proxy-silent-installation/