CODEWITHSUNDEEP
azureazure-active-directoryazure-ad-b2cwindows-authentication
Clumpsypenguin
Clumpsypenguin

Reputation: 341

2 Different Azure AD domains for 1 application

I am facing a kinda frustrating issue here.

I want to build an authentication architecture that contains 2 different unrelated Azure AD Domains with different tenant-Id's.

I figured out 2 different scenario's so the application can be accessed from our developer account and the client can access it from their accounts.

Scenario 1: The 2 domains works independently from each other and thus the application allows both those domains to authenticate.

enter image description here

Scenario 2: Our developer domain gets registered at the client domain and redirected to the application.

enter image description here

Now my question is: Is one of those scenarios's possible? I allready builded a concept, but for now i need to add a developer account into the client domain Azure AD and that is not ideal.

I followed this Documentation but i think this is for authenticate with personal and school/work accounts.

We want both accounts working to authenticate in one single application.

Upvotes: 0

Views: 987

Answers (1)

Carl Zhao
Carl Zhao

Reputation: 9539

First, you must ensure that the application is a multi-tenant application.

Then you need to use Powershell cmd New-AzureADServicePrincipal -AppId "{client id of your application}" to add the application to these two domains as an enterprise application.

Next, you will be able to log in to the application using a different domain.

Upvotes: 1

Related Questions