Power Platform Community Forum Thread Details

Good day,

As per the documentation here, we need to configure the app registration for end-user authentication to allow "Accounts in any organizational directory (Any Azure AD directory - Multitenant) and personal Microsoft accounts (e.g. Skype, Xbox)".

For better security, I tried changing this value to "Accounts in this organizational directory only (Customer - Single tenant),"
using the manifest editor.

However, this seems to be not supported as the error message indicates on login:

{
 "error": {
 "code": "ServiceError",
 "message": "Missing required query string parameter: code. Url = https://token.botframework.com/.auth/web/redirect?error=+is+not+configured+as+a+multi-tenant+application.+Usage+of+the+%2fcommon+endpoint+is+not+supported+for+such+applications+created+after+%2710%2f15%2f2018%27.+Use+a+tenant-specific+endpoint+or+configure+the+application+to+be+multi-tenant
 }
}

Is there any way to limit the app registration to single-tenant only?

This was one finding of a security audit, so I would also be interessted in the reason for this design decision.

Many thanks.

Categories:

General topics