Forum Discussion

Sesu-'s avatar
Sesu-
Brass Contributor
Apr 17, 2020

Azure tenant restriction headers setup

Hi,

I recently read about Azure tenant restriction headers which can be used to restrict web proxies of other tenants except ours when we sign in to office.com or outlook web app and others like that. 

We also recently started using 'Force point' who we thought could help us restrict this although their advice was we have to white list their data centre IP addresses in our Conditional access policies blocking locations.

I felt that the white listing option was a bit insecure for our tenant therefore started reading around the Azure tenant restriction which is not entirely clear to me if i will need the web proxy to achieve this or can simple set it up in the Azure portal and it immediately starts working without any third party integration.

 

Thanks

0 Likes
 
 
 

 

 
 
 
Azure Active Directory (AAD)
  • rosaliod's avatar
    rosaliod
    Apr 18, 2020
    Hello,
    The use case for AAD tenant restrictions is to prevent your on premises users from accessing SaaS apps from other AAD tenants other than your own.

    Yes you will need some form of proxy server to add the 2 required http headers in the request to AAD during authentication. This is what allows AAD to know which tenants to permit for authentication.

    You can read more about the feature in the link below.

    https://docs.microsoft.com/en-us/azure/active-directory/manage-apps/tenant-restrictions

Resources