Allow or Restrict Specific Tetant's user in MultiTenant application in Azure AD

Viewed 336

I have created one multi-tenant application in Azure and I want only user of same tenant and one specific tenant's(my other directory) user can login and not any other user should login. Any setting to restrict or allow specific users setting.

2 Answers

Unfortunately, there is currently no such feature. Controlling access will need to be done in the process of authorizing users. You cannot prevent users from agreeing to log in to your multi-tenant application.

What you can do is build this capability into your application - the auth/JWT token contains the tenantID (tid) as a claim. You can authorize access only for known tenants in your app's allow list. see:here.

You can submit your suggestions to Microsoft and then vote on the feature.

It is not possible to put such restriction in Azure AD.

You have to check the issuer (iss) or tid claim in the commig token to restrict tenants in your app directly. No other way to achieve that.

Please refer this document

Related