Azure AD provisioning when using application proxy

[Jason]

On a zabbix 6.4.7 server we've had Azure login via SAML working for ages. The server is behind an Azure application proxy so we need to have a valid login before we can even get to the login page. I've followed the documentation to set up JIT user provisioning via SCIM, but am running in to trouble getting the Azure connection up and running.
I've put in the Tenant URL for azure (having tested and checked it was right) along with a super admin api token, but Azure is giving me a failed response when I test the credentials and the error message that it is invalid credentials. From browsing the message it is looking like the response is the Azure login page rather than response from the zabbix server.
Can the SCIM user provisioning with with the Azure application proxy or are these 2 incompatible when used together?

[Jason]

For those that stumble across this I've now resolved the matter and this is happily working in Version 7. To summarise we have our Zabbix server behind an Azure Application Proxy and only users authenticated with Azure AD are even allowed access to the web interface. We have Azure application proxy servers deployed locally to our zabbix server that have provisioning feature installed

The solution is 2 Enterprise applications.
Set up an Enterprise Application and only fill in the application proxy part making sure you setup your groups that need access
Then create a On-Premise SCIM application following https://learn.microsoft.com/en-us/en...m-provisioning