AzureDevOps Server 2020 with Azure Application Proxy

This project provides comprehensive documentation and configuration scripts for setting up AzureDevOps Server 2020 with Azure Application Proxy integration.

Overview

Azure Application Proxy enables secure remote access to Azure DevOps Server 2020 without requiring a VPN connection. This setup allows external users to access your on-premises Azure DevOps Server through Azure's cloud infrastructure.

Prerequisites

• Azure DevOps Server 2020 installed and configured
• Azure Active Directory (Azure AD) tenant
• Azure Application Proxy connector installed on-premises
• SSL certificate for external domain
• Administrative access to both on-premises server and Azure portal

Project Structure

├── docs/
│   ├── installation-guide.md
│   ├── configuration-guide.md
│   ├── troubleshooting.md
│   └── security-considerations.md
├── scripts/
│   ├── configure-spn.bat
│   ├── powershell/
│   │   ├── install-connector.ps1
│   │   ├── configure-ssl.ps1
│   │   ├── configure-spn.ps1
│   │   ├── configure-saml-sso.ps1
│   │   ├── test-connectivity.ps1
│   │   ├── test-saml-sso.ps1
│   │   └── test-spn.ps1
│   └── azure-cli/
│       ├── create-app-proxy.sh
│       └── configure-saml-sso.sh
├── config/
│   ├── spn-configuration-template.conf
│   ├── connector-config/
│   │   └── connector.conf
│   ├── ssl-certificates/
│   │   └── certificate-configuration.md
│   └── authentication/
│       ├── azure-ad-config.conf
│       └── saml-sso-config.conf
└── templates/
    ├── azure-resource-manager/
    │   ├── application-proxy.json
    │   └── application-proxy.parameters.json
    └── terraform/
        ├── main.tf
        ├── variables.tf
        └── terraform.tfvars.example

Quick Start

1. Follow the Installation Guide
2. Configure Azure Application Proxy using Configuration Guide
3. Test connectivity and authentication
4. Review security considerations

Key Features

• Secure External Access: Access Azure DevOps Server from anywhere without VPN
• Azure AD Integration: Single sign-on with Azure Active Directory
• SSL/TLS Encryption: End-to-end encryption for all connections
• Conditional Access: Apply Azure AD conditional access policies
• Monitoring & Logging: Comprehensive logging and monitoring capabilities

Support

For issues and troubleshooting, refer to the Troubleshooting Guide.

Contributing

Please read through the documentation before making any changes to the configuration.

More Links

https://learn.microsoft.com/en-us/entra/identity/app-proxy/how-to-configure-sso-with-kcd