Azure Authentication : Allow only user in a group via Azure AD Authentication

Question

Hi,
We have hosted a webapp built in python. We are trying to restrict access to the application via AD groups.
We followed the steps mentioned in the link below.
https://www.c-sharpcorner.com/article/how-to-restrict-users-from-accessing-the-azure-app-service-with-azure-ad-authent/

However all the users in the AD are able to access the application. It looks like as soon as users login, they are being granted access and added to the user list of the enterprise application. What is the way to prevent this and ensure only the users who are part of an AD group can access the application.
I

Answer 1

Hi @Venkatachalam, Rohit (Partner) • Thank you for reaching out.

You need to make sure that User assignment required? is set to YES under the properties of the enterprise applications. If this option is set to NO, all users in Azure AD can sign in to the Enterprise Application, regardless of whether users are added to the user list of the enterprise application or not. In either case, users won't automatically get assigned to the application.

Once you set User assignment required? to YES, only the users who are added to the user list of the enterprise application can access the application.

Please refer to Manage user assignment for an app in Azure Active Directory, for more details.

-----------------------------------------------------------------------------------------------------------

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.