Enable user authorization in Azure App Service without coding

Question

Hello everyone.

I have deployed a web application in Azure App Service for a customer. As per customer requirements, access to the application needs to be restricted to authorized users using their corporate credentials.

I have seen that App Service can be easily integrated with different identity providers. In this case, I should work with Entra ID. However, with this integration, any user within the organization would be able to access the application.

Once the application is integrated with the client's Entra ID tenant, how can I easily configure it so that only authorized users can access it?

Answer 1

@guidofranco The feature is best applicable for authentication but there are authorization policies that you can configure to allow specific users to access your application.

Similarly, you can enforce these restrictions at the app registration level as well as shown in the official docs.

But for any other complex decision making that you may need, you will have to code the logic in - either in the same app or offload to a separate service that can make these checks across all your applications.