question

Phyxsius-9204 avatar image
0 Votes"
Phyxsius-9204 asked Phyxsius-9204 answered

AAD SSO on second tenant with App Registration to main tenants Web App

I need to provide SSO for my web app using AAD of other tenant

I am running my app in my Azure tenant (A) and I have used App registration in my other Azure tenant (B) to gain access to its AAD.
Within my app I can access the users list of Azure tenant (B). I would like to build further on this by adding SSO.
Unfortunately, I cannot find a document that explain how to accomplish this within Azure.

So the main idea is to run my app in my Azure tenant (A) and when a user makes use of my app the user is logged in by means of SSO with the use of there own AAD user list.

Any pointers, ideas, help on this subject is much appreciated.

azure-active-directoryazure-ad-app-registrationazure-ad-single-sign-on
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

MarileeTurscak-MSFT avatar image
0 Votes"
MarileeTurscak-MSFT answered MarileeTurscak-MSFT commented

Hi @Phyxsius-9204,

There are two main ways to do this:

1) You can create a multitenant app that allows users to sign in from different tenants and create a service principal in the second tenant.

Guide for configuring a new multi-tenant app: https://docs.microsoft.com/en-us/azure/active-directory/develop/setup-multi-tenant-app

Guide for converting an existing app to be multi-tenant: https://docs.microsoft.com/en-us/azure/active-directory/develop/howto-convert-app-to-be-multi-tenant

2) You can use B2B and add the users from Tenant A as guest users in Tenant B. This method works well but comes with additional licensing costs. If you take this route you will need one license for every user within your company, or one license for every five external guest users from outside of your company.

[2]: https://docs.microsoft.com/en-us/azure/active-directory/develop/howto-convert-app-to-be-multi-tenant



· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Let me know if this is what you are looking for.

0 Votes 0 ·
Phyxsius-9204 avatar image
0 Votes"
Phyxsius-9204 answered

Hi MarileeTurscak-MSFT,

And thank you for your prompt reply.
I have already chosen and created a Multitenant App and registerd my app in my second Azure tenant (B) as such.
It seems that there needs to be configured some additional options within Azure to make this possible.

What they are eludes me.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.