azure portal tenant sign in block exclude my tenant

아롬 황 236 Reputation points
2022-02-03T15:38:23.137+00:00

I want to block the PC(Client) so that only my tenant can sign in.

I want to prevent my pc from accessing other tenants (azure portal).
I want to allow logins only to the tenants I own (azure portal).

I need an idea. Is there any way?
Please help.

Best regard

Microsoft Security | Microsoft Entra | Microsoft Entra ID
0 comments No comments
{count} votes

Accepted answer
  1. AmanpreetSingh-MSFT 56,876 Reputation points Moderator
    2022-02-03T16:00:30.137+00:00

    Hi @아롬 황 • Thank you for reaching out.

    Yes, this can be achieved by using Tenant Restriction. To apply tenant restrictions, you must configure your proxy to insert the Restrict-Access-To-Tenants header containing the list of permitted tenants into traffic destined for Azure AD. If the Restrict-Access-To-Tenants: <permitted tenant list> header is present, Azure AD only issues security tokens for the permitted tenants. If the users behind the proxy try to access any other tenant that is not in the list of permitted tenants within the Restrict-Access-To-Tenants header, they will get below error:
    171101-image.png
    Below is a high level diagram of how it works:
    171035-image.png

    To test it out, you can use Fiddler for a host-based approach.

    Read more: Restrict access to a tenant

    -----------------------------------------------------------------------------------------------------------

    Please "Accept the answer" if the information helped you. This will help us and others in the community as well.


0 additional answers

Sort by: Most helpful

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.