简体   繁体   English

单个AAD应用程序的多个租户是否可以访问O365进行日历事件

[英]Multiple tenants of single AAD application can access O365 for calendar events or not

I am developing UWP application, in that I used the AAD authentication for security after user login successfully then I am trying to call O365 API with my accestoken for to getting calendar events of authorized user. 我正在开发UWP应用程序,因为在用户成功登录后,我使用AAD身份验证来确保安全性,然后尝试使用我的权限调用O365 API,以获取授权用户的日历事件。

Up to now it's working fine, but I was enabled the “Application is multi-tenant” option in AAD after that I used different tenant AAD user credentials to sign into the application. 到目前为止,它工作正常,但是在我使用不同的租户AAD用户凭据登录应用程序之后,在AAD中启用了“应用程序是多租户”选项。 After successful sign in, when I am trying to call O365 API with new tenant credentials then I got the exception like “Unauthorized”. 成功登录后,当我尝试使用新的租户凭据调用O365 API时,出现了“未经授权”之类的异常。

Please tell me, if it is possible or not for different tenant users can access their respective O365 calendar events from a single tenant AAD application(multi-tenant enabled app)? 请告诉我,对于不同的租户,是否可以通过单个租户AAD应用程序(启用多租户的应用程序)访问各自的O365日历事件?

-Pradeep -Pradeep

When you switch to MultiTenant the new tenancy needs to go through the authorize / permissions granting again? 当您切换到MultiTenant时,新的租期需要再次通过授权/权限授予吗? (I'm not an expert, but I'm developing a similar app) (我不是专家,但我正在开发类似的应用程序)

"Step 6: [optional] Create an Azure Active Directory test tenant “步骤6:[可选]创建Azure Active Directory测试租户

This sample shows how to take advantage of the consent model in Azure AD to make an application available to any user from any organization with a tenant in Azure AD. 此示例说明如何利用Azure AD中的同意模型来使应用程序可供Azure AD中具有租户的任何组织中的任何用户使用。 To see that part of the sample in action, you need to have access to user accounts from a tenant that is different from the one you used for developing the application. 要查看实际示例的一部分,您需要有权从与用于开发应用程序的租户不同的租户访问用户帐户。 The simplest way of doing that is to create a new directory tenant in your Azure subscription (just navigate to the main Active Directory page in the portal and click Add) and add test users. 最简单的方法是在Azure订阅中创建一个新的目录租户(只需导航到门户中的Active Directory主页面,然后单击“添加”)并添加测试用户。 This step is optional as you can also use accounts from the same directory, but if you do you will not see the consent prompts as the app is already approved." 此步骤是可选步骤,因为您也可以使用同一目录中的帐户,但是如果您这样做,则因为该应用程序已被批准,您将不会看到同意提示。”

https://azure.microsoft.com/en-gb/documentation/samples/active-directory-dotnet-webapp-multitenant-openidconnect/ https://azure.microsoft.com/zh-CN/documentation/samples/active-directory-dotnet-webapp-multitenant-openidconnect/

声明:本站的技术帖子网页,遵循CC BY-SA 4.0协议,如果您需要转载,请注明本站网址或者原文地址。任何问题请咨询:yoyou2525@163.com.

 
粤ICP备18138465号  © 2020-2024 STACKOOM.COM