Is it possible to authenticate with two different Azure(Microsoft Entra)?

Back to Forums

yumiko nakaza

Question

Authentication

Dear Outsystems Community,

We are looking for how to connect with two distinct Azure - Microsoft Entra - .

We found procedure to connect with one Azure in following URL.

https://success.outsystems.com/documentation/11/user_management/end_users_authentication/configure_microsoft_entra_authentication/#test-your-configuration

But we would like to know the way to connect with two distinct Azure.

Here are some specifics about our situation and what we want to achieve

========================

・We have two areas: Area A, Area B

・Each area has its own Azure. (These two Azures are not the same one.)

・Area A and Area B have different domains for the accounts they handle

For example,

　Area A's domain:@AreaA.com

　Area B's domain:@AreaB.com

・Accounts with the domain "@AreaA.com" are registered in Azure in Area A, and Accounts with the domain "@AreaB.com" are registered in Azure in Area B,

・We would like to be able to connect Outsystms to the Azure in both Area A and Area B, and authenticate both "@AreaA.com" and "@AreaB.com" domains.

・We would like to be able to authenticate with the two Azure for all the apps we build in Outsystms.

========================

Are there any possibilities or best practices for achieving this?

Kind regards,

Yumiko

31 Jan 2025

Thibaut G

I don't think this is possible.
Even with multiple tenants as described in the SAML2.0 docs: https://success.outsystems.com/documentation/11/user_management/end_users_authentication/configure_saml_2_0_authentication/#current-limitations

An alternative way to meet this requirement is to develop authentication at the application level using OAuth2 tokens. While this may not be the ideal scenario, it is a feasible approach to achieve your requirements.

31 Jan 2025

Mukesh Kumar

Dear Yumiko,

Yes, it is possible to authenticate with two distinct Azure instances in OutSystems.

Solution:

Configure OAuth 2.0 for both Azure environments (Area A and Area B) in OutSystems.
Create Custom Authentication: Implement logic to detect the user's domain (@AreaA.com or @AreaB.com) and redirect them to the appropriate Azure AD instance for authentication.
Multi-Tenant Support: Ensure proper multi-tenant configuration in Azure and use OAuth 2.0 for user authentication.

Best Practices:

Test authentication flows for both environments.
Ensure security and compliance in the custom authentication setup.

Let me know if you need further assistance.

Best regards,
Mukesh Kumar S

06 Feb 2025

Community GuidelinesBe kind and respectful, give credit to the original source of content, and search for duplicates before posting.

See the full guidelines