Azure App Proxy and OIDC

Hi All,

Just wanted to confirm I’m going down the wrong rabbit hole. I’ve got an on-premise records management solution that has teams integration. It requires exposing an API to the internet so Teams can reach it (after uploading a custom app). The integration requires configuring an azure app of course to enable open id authentication into the application (based on some .config files that speak to the azure app) So I just figured an Azure App Proxy would be an easy and secure way to achieve this without the need to actually expose this api and involving the network team and setting up DMZ’s.

I had it working, but CORS ruined it all due to the app proxy calling on login.microsoft.com to authenticate and refresh the tokens.

Basically, is there anything I’m overlooking or is any api using openid for authentication boned when using azure app proxy due to azure app proxy relying on oauth2 which causes a cross origin flag by going to login.microsoft.com I