Application Manager Only guide · Step 5 of 5

Hostname & HTTPS

Give users a friendly, secure URL by adding an HTTPS binding for your host name, so they can reach SoftwareCentral from their own browsers.

1 Add the HTTPS binding

Add a binding for your desired host name. The host name should also be configured in your DNS.

  1. In IIS Manager, on the SoftwareCentral site, click the Add… button and add a binding for your host name.
  2. Choose a certificate that is trusted by your clients and click OK.
IIS Add Site Binding dialog with https and certificate
IIS Add Site Binding — https + a trusted certificate.
Optional port 80 binding You may also add a binding on port 80 for your SoftwareCentral host name, so users who do not type https:// can still find SoftwareCentral. A rewrite rule redirects them to the https site.

2 Azure / Entra Update the app registration

Once you have added a host name, go to the app registration in the Azure portal and add the new host name to the Redirect URIs.

App registration Redirect URIs with the new host name
Add the new host name to the app registration's Redirect URIs.

You should also add the front-channel logout URL. This is required if you want to use single sign-out. The sign-out URL is your host name followed by /logout.

App registration front-channel logout URL
Front-channel logout URL (/logout) for single sign-out.

3 Best practices

TopicRecommendation
DNS firstCreate the host name in DNS before you add the binding.
CertificateUse a certificate that your clients trust.
Port 80Add a port 80 binding as well, so users who type only the host name are redirected to https.
Application Base URLSet it in Settings › Configuration to the https address.
AzureUpdate the Redirect URIs and the front-channel logout URL in the app registration at the same time.

4 Troubleshooting

You seeLikely cause and what to do
Sign-in fails on the new host nameThe host name is not in the app registration's Redirect URIs. Add it (step 2 above).
Single sign-out does not sign you outThe front-channel logout URL is missing. Add the host name followed by /logout.
The browser warns about the certificateThe clients do not trust the certificate. Use a certificate that they trust.
A http address does not redirect to httpsThe port 80 binding or the rewrite rule is missing. Check the binding and that the IIS URL Rewrite Module is installed (see Prerequisites).

✓ Installation complete

Done 🎉 SoftwareCentral is installed and reachable. Finish configuring the Application Manager Only edition in the in-app Setup Guide (Intune, mandatory settings, Robopack, templates).