How to restrict the access to the app through Azure SSO?

Question

Hello, i'm a representative of the IT company that is currently working on the development of a feature that allows users to access our application through Azure SSO. We need to allow access not for all users but only for users whose email addresses are added to appropriate list in the Microsoft application. Please help me to find out how i can set it up working this way?

Answer 1

Hi @Manzhelii, Elmira ,

Thanks for reaching out.

I understand you are looking to restrict the users to access the application which is by default enabled for all the users in the tenant.

You can restrict the user completely to not grant access to the application in Azure AD by checking the "Assignment required" box in your Enterprise application.

You would require either of these, Global administrator, Application administrator, or Cloud application administrator roles to manage the application.

Go to Azure Active Directory -> Enterprise Applications > All applications and select the application you want to configure.

Select Properties and set "Yes" in User Assignment Required field and save the changes.

Also, make sure to assign users and groups which need to grant access to the application.

Under Manage, select the Users and groups > Add user/group.

Select the users or groups you want to allow and assign them access to your application. Confirm that the users and groups you added are showing up in the updated Users and groups list.

Now only the above assigned users or group members are allowed to access the application.

Hope this will help.

------------------------------------------

Please remember to "Accept Answer" if answer helped you.