Explicit Forward Proxy for Global Secure Access
📋 Note: This is an example service that generates proxy auto-configuration (PAC) files for Microsoft Entra Internet Access and is intended for testing/validating explicit forward proxy features. Please do not use this service for broad production deployments. This service is not supported by Microsoft and may be decommissioned without notice. Open source files for this service are available
on GitHub.
Usage
This service hosts customized PAC (Proxy Auto-Configuration) files for Microsoft Entra Internet Access. Each PAC file is dynamically generated based on your tenant ID.
PAC File URL Format
https://pac.azureidentity.us/YOUR_TENANT_ID
Example
If your tenant ID is 12345678-1234-1234-1234-123456789012, your PAC file URL would be:
https://pac.azureidentity.us/12345678-1234-1234-1234-123456789012
Note: Both HTTP and HTTPS are supported, but HTTPS is recommended for security.
Browser Configuration
Windows - System-Wide Proxy Settings
Open Settings → Network & Internet → Proxy
Turn on "Use setup script"
Enter your PAC file URL in the "Script address" field
Click "Save"
macOS - System-Wide Proxy Settings
Open System Preferences → Network
Select your active network connection and click "Advanced"
Go to the "Proxies" tab
Check "Automatic Proxy Configuration"
Enter your PAC file URL in the URL field
Click "OK" and then "Apply"
Microsoft Edge / Google Chrome
These browsers typically use system proxy settings, but you can also configure them individually:
Go to Settings → Advanced → System
Click "Open your computer's proxy settings"
Follow the Windows or macOS instructions above
Alternative for Chrome:
Go to Settings → Advanced → System
Turn off "Use system proxy settings"
Configure proxy manually using the PAC file URL
Mozilla Firefox
Firefox has its own proxy settings:
Go to Settings → General → Network Settings
Click "Settings"
Select "Automatic proxy configuration URL"
Enter your PAC file URL
Click "OK"
Safari (macOS)
Safari uses system proxy settings:
Follow the macOS system-wide proxy configuration above
Safari will automatically use the configured PAC file
Verification
To verify your PAC file is working correctly:
Visit a website that should go through the proxy
Check your browser's network tools or proxy logs
Use browser debugging tools like chrome://net-internals/#proxy in Chrome/Edge
Troubleshooting
Common Issues:
- Ensure your tenant ID is correct and properly formatted as a GUID
- Verify your tenant has Microsoft Entra Internet Access enabled
- Check that the PAC file URL is accessible from your network
- Some corporate firewalls may block PAC file downloads