Azure tenant restriction headers setup

Hi,

I recently read about Azure tenant restriction headers which can be used to restrict web proxies of other tenants except ours when we sign in to office.com or outlook web app and others like that.

We also recently started using 'Force point' who we thought could help us restrict this although their advice was we have to white list their data centre IP addresses in our Conditional access policies blocking locations.

I felt that the white listing option was a bit insecure for our tenant therefore started reading around the Azure tenant restriction which is not entirely clear to me if i will need the web proxy to achieve this or can simple set it up in the Azure portal and it immediately starts working without any third party integration.

Thanks

Azure Active Directory (AAD)

rosaliod
Apr 18, 2020
Hello,
The use case for AAD tenant restrictions is to prevent your on premises users from accessing SaaS apps from other AAD tenants other than your own.

Yes you will need some form of proxy server to add the 2 required http headers in the request to AAD during authentication. This is what allows AAD to know which tenants to permit for authentication.

You can read more about the feature in the link below.

https://docs.microsoft.com/en-us/azure/active-directory/manage-apps/tenant-restrictions

Forum Discussion

Azure tenant restriction headers setup

Resources