Entra ID

Pozi’s Microsoft Entra Application Proxy integration enables your organisation’s staff and other authorised users to access internal data sources in Pozi without needing to be connected to your network.

How it works

1. The user visits the dedicated Pozi Enterprise address, for example <sitename>.enterprise.pozi.com.
2. The Pozi app sends a request to the client’s Entra Application Proxy endpoint, for example https://poziserver-<entra-application-client-name>.msappproxy.net/pozi/qgisserver/wfs3.json.
3. If the user is already signed in to their Microsoft account, Pozi continues to load and the user gains access to the internal datasets configured for Pozi within the organisation’s Application Proxy.

If the user is not already logged in, the browser is redirected to the Microsoft login page.

Once signed in, users will have access to internal datasets for as long as their Microsoft account remains logged in.

Permissions

Whether a user can access private datasets depends on whether the organisation has given that user permission to access the dedicated Entra Application Proxy endpoint for Pozi.

As long as the staff member or other authorised user has permission to access the Application Proxy endpoint, for example https://poziserver-<entra-application-client-name>.msappproxy.net/pozi/, they will have access to the internal datasets that have been configured within Pozi.

Site URL

Using <sitename>.enterprise.pozi.com enables a user to be authenticated before proceeding to the Pozi site. These users will gain access to the private datasets.

Public users should continue to use <sitename>.pozi.com. They will not be prompted to authenticate, and they will have access to only public data.

Example:

• Public URL: https://<sitename>.pozi.com/
• Staff URL: https://<sitename>.enterprise.pozi.com/

Configuration

See the Entra ID setup guide for the full configuration steps.

Entra Enterprise Application

Pozi can also be set up as an Entra Enterprise Application for an organisation. This enables end users to access the app via a shortcut on both the Microsoft My Apps page and the Microsoft 365 Apps page.

To create an Entra ID Enterprise Application, follow these steps.

• Navigate to Enterprise applications in the Entra admin centre.
• Click to add a New application.
• Click Create your own application.
• Add “Pozi” as the name.
• Select Integrate any other application you don't find in the gallery (Non-gallery).
• Click the Create button.
• Navigate to Properties, and fill in the form as shown below.

Your new Pozi app will appear along your other corporate apps.