只应对Azure AD中的组中的用户进行身份验证 - 而不是所有用户 [英] Only users in group in Azure AD should be authenticated - not all users

问题描述

我有网络应用程序。我想只允许访问属于Azure AD中特定组的用户。但是，目前Azure AD中的所有用户都能够对该应用程序进行身份验证。我需要更改哪些设置？

我已按照https：//docs.microsoft.com/en-us/azure/active-directory/develop/howto中提到的步骤进行操作-restrict-your-app-to-a-set-of-users

然而，Azure中的某些步骤/选项不可用，例如 

9。找到设置  需要用户
分配？  并将其设置为  是 。
当此选项设置为  是 ，
然后必须先将用户分配给此应用程序才能访问它。

此致，

Snehal。

解决方案

你是说你只是遇到第9步的问题？

如果不是您遇到什么问题？

是否在您的租户或其他租户中注册了？ ？如果您有两个租户，您试图限制访问？ 

https://docs.microsoft.com/en-us/azure/active-directory/manage-apps/methods-for-assigning-用户和群组

https://docs.microsoft.com/en-us/azure/active-directory/manage-apps/assign-user-or-group-access-portal

我没有办法测试这个，但隐藏它应该有效。此外，删除访问应具有相同的效果

https://docs.microsoft.com/en-us/azure/active-directory/manage-apps/hide-application-from-user-portal

https： //docs.microsoft.com/en-us/azure/active-directory/manage-apps/methods-for-removing-user-access

已经有一段时间了对于我的应用程序，所以如果其他人有更好的想法或更多，请添加。 

Hi,

I have web application. I want to give access to only those users who belong to a particular group in Azure AD. However currently all users in Azure AD are able to authenticate to that application. What settings do I need to change ?

I have followed the steps mentioned in https://docs.microsoft.com/en-us/azure/active-directory/develop/howto-restrict-your-app-to-a-set-of-users

However some of the steps /options here are not available in Azure e.g. 

9. Locate the setting User assignment required? and set it to Yes. When this option is set to Yes, then users must first be assigned to this application before being able to access it.

Regards,

Snehal.

解决方案

Are you saying that you are only having problems with step 9?

If not what steps do you have a problem with?

Is it registered in your tenant or another tenant? If you have two tenants which tenant are you trying to restrict access to? 

https://docs.microsoft.com/en-us/azure/active-directory/manage-apps/methods-for-assigning-users-and-groups

https://docs.microsoft.com/en-us/azure/active-directory/manage-apps/assign-user-or-group-access-portal

I do not have a way to test this but hiding it should work. Also, removing access should have the same effect

https://docs.microsoft.com/en-us/azure/active-directory/manage-apps/hide-application-from-user-portal

https://docs.microsoft.com/en-us/azure/active-directory/manage-apps/methods-for-removing-user-access

It has been awhile for me with applications so if someone else has a better idea or more please add. 

这篇关于只应对Azure AD中的组中的用户进行身份验证 - 而不是所有用户的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！