Microsoft Entra / WebSockets problem

Trying to deploy a mobile data-capture application from a 3rd party vendor, into a customer site using Microsoft Entra - both as Application Proxy and for SSO.

Intercepting the web traffic from my phone; all the WSS calls (I believe from the CouchbaseLite Replicator code) are being rejected by Entra - basically as a 302 redirect back to login - HTTP/S etc are succeeding without problems.

This is so far outside my wheelhouse I can’t see the boat…

Has anybody seen anything similar?

Yes, the replicator uses WebSockets. Verify that the initial HTTP request made to open the WebSocket has the correct auth headers, either basic auth or a session cookie; whatever the successful HTTP requests are using.

If the WebSocket request is not correctly authenticated, you’ll need to use the ReplicatorConfig API to add the appropriate credentials.