Microsoft Entra Global Secure AccessExplicit Forward Proxy session management
In brief
Explicit Forward Proxy uses Microsoft Entra ID authentication and authorization to validate user access before allowing network traffic. This validation method allows for adaptive policies in Microsoft Entra Conditional Access, modern credentials like passkey…
Documentation change
Explicit Forward Proxy (preview) session management
Explicit Forward Proxy session management
Explicit Forward Proxy uses Microsoft Entra ID authentication and authorization to validate user access before allowing network traffic. This validation method allows for adaptive policies in Microsoft Entra Conditional Access, modern credentials like passkeys, and Continuous Access Evaluation with session revocation. Classic proxy authorization methods, such as basic, digest, NTLM, or Kerberos, aren't supported.
Session management settings
Explicit Forward Proxy supports smart session management (enabled by default), HTTP header-based session affinity (can be enabled), IP-based session affinity (enabled by default), and cookie-based session affinity. Available capabilities depend on the affinity method.
diff --git a/docs/global-secure-access/concept-explicit-forward-proxy-session-management.md b/docs/global-secure-access/concept-explicit-forward-proxy-session-management.md index 8eaff7aee31..26f48f59e1e 100644 --- a/docs/global-secure-access/concept-explicit-forward-proxy-session-management.md +++ b/docs/global-secure-access/concept-explicit-forward-proxy-session-management.md @@ -6,13 +6,10 @@ ms.date: 04/06/2026 ms.reviewer: alexpav --- -# Explicit Forward Proxy (preview) session management +# Explicit Forward Proxy session management Explicit Forward Proxy uses Microsoft Entra ID authentication and authorization to validate user access before allowing network traffic. This validation method allows for adaptive policies in Microsoft Entra Conditional Access, modern credentials like passkeys, and Continuous Access Evaluation with session revocation. Classic proxy authorization methods, such as basic, digest, NTLM, or Kerberos, aren't supported. -> [!IMPORTANT] -> The Explicit Forward Proxy feature is currently in preview. This information relates to a prerelease product that might be substantially modified before release. Microsoft makes no warranties, expressed or implied, with respect to the information provided here. - ## Session management settings Explicit Forward Proxy supports smart session management (enabled by default), HTTP header-based session affinity (can be enabled), IP-based session affinity (enabled by default), and cookie-based session affinity. Available capabilities depend on the affinity method.