Prerequisites

■

UMP-365 is installed and works on the VM itself, for example on http://localhost/tenantui.

■

A public DNS name for UMP-365, for example ump.example.com, pointing to the public IP of the Application Gateway.

■

A certificate for the DNS name, signed by a public CA, as a .pfx file or in Azure Key vault.

■

A dedicated subnet for the Application Gateway, in the same virtual network as the UMP VM or a peered one.

■

The private IP address of the UMP-365 VM.

■

Access to the Entra ID app registrations that UMP-365 uses for sign-in, to change their redirect URIs.

■

A way to reach the VM for administration that does not access through the WAF, such as Azure Bastion or a VPN.