Unanswered

Restrict Azure AD login to company domain/tenant

(0) Share

Report

Posted on by Robby

Hi All,

How to restrict the Azure AD login to the company domain/tenant only? Currently I try to login with my personal Microsoft account (use hotmail) also can login. The portal azure Authentication also already setup like below:

Thanks.

Categories:

General topics

I have the same question (0)

All responses (10)

Answers (0)

oliver.rodrigues 9,396 Most Valuable Professional on at

Like (0)

Report
Copy link

Link copied!

by any chance, is your hotmail account a Guest account in your Azure AD?

Was this reply helpful? Yes No
Robby 30 on at

Like (0)

Report
Copy link

Link copied!

hi @OliverRodrigues,

At first my hotmail account not listed as Guest account in my Azure AD, but when I try to login, look like it create my hotmail account as Guest account. Any way to block that?

Thanks.

Was this reply helpful? Yes No
ragavanrajan 7,044 Most Valuable Professional on at

Like (0)

Report
Copy link

Link copied!

Hi @devost

Probably, you might have given consent to any of your applications using your personal account as a guest. I have double-checked the official docs

Official link here

Try the below steps

1. Remove your guest account from the Azure AD

2. Remove your Contacts from the Portal management

In Design Studio

1. Press the sync configuration and preview the website. Press "Ctrl+F5"

Try in the Incognito window

Hope it helps.
------------

If you like this post, give it a Thumbs up. Where it solved your request, Mark it as a Solution to enable other users to find it.

Was this reply helpful? Yes No
Robby 30 on at

Like (0)

Report
Copy link

Link copied!

Hi @ragavanrajan,

Yes, if the account removes from Guest account in Azure AD and Contacts in Portal Management, it will restrict user from login. But, is it possible to restrict the access without need to remove from Guest account in Azure AD first?

Thanks.

Was this reply helpful? Yes No
ragavanrajan 7,044 Most Valuable Professional on at

Like (0)

Report
Copy link

Link copied!

Yes @devost

the simple way is as follows

In Portal management

1. Under Security > Contacts > select your guest contact ( Check email address) and press deactivate.

2. Image for your reference.

3. Once done, In design studio > Press sync (not required but for the safer side)

4. Try in the incognito window ( make sure you turn off the "block third party cookies"

Hope it helps.
------------

If you like this post, give it a Thumbs up. Where it solved your request, Mark it as a Solution to enable other users to find it.

Was this reply helpful? Yes No
Robby 30 on at

Like (0)

Report
Copy link

Link copied!

Hi @ragavanrajan,

I just try with another hotmail account which not listed as Guest user in Azure AD and not register in Contacts also, but it still can login. Did you have any idea why it's work for 1 user but not for the other user? Both are personal hotmail account which not listed on both Azure AD guest user and Contacs.

Thanks.

Was this reply helpful? Yes No
ragavanrajan 7,044 Most Valuable Professional on at

Like (0)

Report
Copy link

Link copied!

Hi @devost

I think probably your external collaboration settings are open.

Try this

1. go to portal.azure.com

2. search for "External identities"

3. And play around with guest user settings ( I would restrict guest user completely )

Hope it helps.
------------

If you like this post, give it a Thumbs up. Where it solved your request, Mark it as a Solution to enable other users to find it.

Was this reply helpful? Yes No
Robby 30 on at

Like (0)

Report
Copy link

Link copied!

hi @ragavanrajan,

Even if I set both setup to most restrictive one, 1 of the hotmail account still can login with azure ad. Also, how can same setup, but work differently for 2 hotmail account?

Thanks.

Was this reply helpful? Yes No
ragavanrajan 7,044 Most Valuable Professional on at

Like (0)

Report
Copy link

Link copied!

Hi @devost

To note. It might not be your power pages application allowing guest users, or it can be teams or any other app settings allowing "Guest users"

To solve

1. Please remove the guest account from Azure AD and give it a try.

2. Remove the contacts from the Portal management

3. Apply the Guest user restrictive settings for external collaborations

4. Azure AD allow only a single tenant.

5. Restart the portal

Hope it helps.
------------

If you like this post, give it a Thumbs up. Where it solved your request, Mark it as a Solution to enable other users to find it.

Was this reply helpful? Yes No
Robby 30 on at

Like (0)

Report
Copy link

Link copied!

Hi @ragavanrajan,

Both hotmail account not listed on Guest account in Azure AD and Contacts in Portal Management. I also already set guest user restrictive settings to the one most restrictive setup. The Azure AD also allow only a single tenant. Restart portal, I also already done 2 times. The weird thing here is, 1 my hotmail account work well after I done all of that (this hotmail cannot login as Azure AD), but my other hotmail account not work after I done all of that (still can login).

Thanks.

Was this reply helpful? Yes No