Register a client

[chmav]

Hi

We develop an web based erp system and our customers can use this software as a service. I'm building an integration of PowerBI in our software. Can I register one application for Power BI and use this in all installation of our software? The web url of our application is different.
When our customers authenticate with their PowerBI-Account, is there any risk, that customers can see/access data of the other customers?
Is this the correct process or need all customers an Azure Active Directory Account an register their own application and then authenticate with the PowerBI-Account?

Best regards

Christoph

[Eric_Zhang]

---

@chmav wrote:

Hi

We develop an web based erp system and our customers can use this software as a service. I'm building an integration of PowerBI in our software. Can I register one application for Power BI and use this in all installation of our software? The web url of our application is different.
When our customers authenticate with their PowerBI-Account, is there any risk, that customers can see/access data of the other customers?
Is this the correct process or need all customers an Azure Active Directory Account an register their own application and then authenticate with the PowerBI-Account?

Best regards

Christoph

---

@chmav
You can register one application for Power BI and use it for all customers from different orgnization. Check How to sign in any Azure Active Directory (AD) user using the multi-tenant application pattern

The customer won't access the data from other customers, because they login with their own AAD account.

PowerBI-Account is actually an AAD account.

[chmav]

Hi

Thank you Eric for your help. It toke some time for testing this solution. I have changed to multi-tenant but I have to set the redirect_uri in AAD to the same url as in url.
I use the nuget package Microsoft.IdentityModel.Clients.ActiveDirectory and use the function GetAuthorizationRequestUrlAsync to get the URL. This url is called in browser and then I recieve the error: The reply address ... does not match the reply addresses configured for the application

I use https://login.windows.net/common


What do I need to change for multi tenant access without this url check?


Best regards

Christoph