How to make two application trusted using Azure AD

Developer 1

Hi,
I am riyaj, working on some POC. I have created two microsoft personnel accounts to get different tenant.
As a part of POC, i have created application in each tenant with multi tenant option. I am looking for persmission and scope. Need input about how to create custom role and how it is used to get token.
This is POC where two API will be trusted using managed service by azure.
Can you please explain the steps how to generate token along with the example in one application and how that will be validated in another application.

If possible can u share you working time as per your time zone so I will be online and will get support from you by which I can easily proceed in my POC work.

JamesTran-MSFT 36,361 Reputation points Microsoft Employee

2021-03-29T23:37:37.973+00:00

@Developer
Thank you for your post and I apologize for the delayed response!

From your verbatim and other related issues, it looks like one of my colleagues, is helping you within another thread:
-https://learn.microsoft.com/answers/answers/303525/view.html

If you're still having issues with this and would like our support team to take a closer look into your environment, please let me know.
Thank you for your time and patience throughout this issue.
Developer 1 Reputation point

2021-03-31T07:45:47.17+00:00

Please help me on it. I have tried all the things that you explained.
Developer 1 Reputation point

2021-03-31T07:51:10.897+00:00
I need authentic solution by which I can proceed it with my team. For me it become difficult to get in conclusion. Can you please help me out in steps as like fresher. I have two azure accounts to get two tenant ids. These are free subscription accounts. I have create App1 in tenant1 and App2 in tenant2. Can you guide me next steps along with end points.

In another thread i already pinged about my issue but didnot get response.

Thanks in advance.
JamesTran-MSFT 36,361 Reputation points Microsoft Employee

2021-03-31T20:52:45.607+00:00

@Developer
Thank you for the quick response!

Based off your error message from the other thread, can you add the user account that you're trying to log-in with into your "default directory", I'd make sure that the user is in the same tenant that your application ('745c7cdf-d862-4e91-a24c-0243483f6f2b') is in.

Error message:
Selected user account does not exist in tenant 'Default Directory' and cannot access the application '745c7cdf-d862-4e91-a24c-0243483f6f2b' in that tenant. The account needs to be added as an external user in the tenant first. Please use a different account

Lastly, since you've been experiencing this issue for a while now, if you'd like to work closer with our support team on this, please let me know.
Thank you for your time and patience throughout this issue.