Multi-tenant architecture for SaaS apps with Microsoft 365 and Azure Active Directory

#multitenancy #saas #microsoft365 #azure

Multitenancy is an architecture where multiple tenants share the same physical instance of an app. In this video, you'll learn how to create multi-tenant apps with Microsoft Cloud Advocates Bob German and Rabia Williams. They will convert a JavaScript Single Page Application to a multi-tenant application, all while explaining the concept of multi-tenant apps.

🔑 The authentication flow used in this sample project is OAuth 2.0 auth code grant.

🔗 Links 🔗
If you find these concepts interesting and want to learn more about developing apps for Microsoft 365 then check out the below links:

[alipetarian]

Hi Bob, You made my day. Thanks for sharing how to delete the consent, I was dealing with permissions issue while testing. You rock man.

[KingZarus]

Very helpful and clarifying! Thanks for the video.
Two related questions come to mind that you might want to (briefly) touch in another video. 1.) So if you have an App Registration in a home tenant, and you give this delegated permissions on the Graph, it kinda feels like you this is 'your' Graph (this is probably where I'm not right). So if you allow multitenants on the app registration, how does this 'central' app registration work with 'local' Graph data? I guess it's not exactly related to the topic you discussed as it's a different application we're talking about (Graph), but just to clarify on this in general I was wondering how this works under the hood... 2.) A very specific scenario that pops into mind is the SharePoint Online Client Extensibility Web Application Principal. Why would the team behind SharePoint Online have chosen for a 'unique' App Registration in each tenant, instead of this 'central' approach? Is there a reason why you would chose one over the other?
Again, thanks for the video!

[newabyuser]

more videos please this was very helpful

[toerti]

Pretty cool. Thanks guys. This solves a lot of things. Great video.

[harshrajpal]

I have a question. I have tenant X and where I have 5000 users and 1000 b2b external users.
Tenant Y has a multitenant APP which I want to access. But it is asking for many permission that I don't want to grant, how can grant admin consent for few graph permissions only. How can I achieve that ?
Also I want only 200 users from tenant X to use that app will group assignment to SP will work ?
Also external users in tenant X will be able to use that app as tenant X users ? Or will it take to their home tenant ?

[Hans-JurgenBeling]

If I wanted to save calender items or tasks, would id work the same way as you have shown?

[onkarrajambatwar]

How the home Tenat will know how much tenants are registered

[travel-pagol]

Really Helpful Video but i have a question regarding RBAC permission . I have a case Study regarding Multi-tenant RBAC Permission : I have a Application in Tenant A But i want to create a RBAC permission from Tenant B . How I will do that ? If anyone know that Please Share & important references as well .

[martinloeffler]

Thank you for this really great video!

[sujitsingh]

i did selected multi-tenant and also did the changes in url but getting invalid user error .

[amoenus_dev]

Is there a setting or other way to restrict which tenants are allowed to connect to application?

[andresjimenez]

Sorry, i’m afraid that the link of the blog is not working, Could you fix it ?
Thanks for the video, great subject