title: Limiting access to Azure Static Web App to single tenant
body: <p>An <a href="https://azure.microsoft.com/en-us/services/app-service/static/" rel="nofollow noreferrer">Azure Static Web App</a> has a notion of <a href="https://docs.microsoft.com/en-us/azure/static-web-apps/authentication-authorization" rel="nofollow noreferrer">auth</a> that can be used to whitelist individual users, or individual identity providers (as in <a href="https://stackoverflow.com/questions/62378400/azure-static-web-app-disable-anonymous-access">this question</a>).</p>
  <p>Is it possible to require authentication through the particular tenant/organizational directory used to set up the resource, through Azure configuration alone, as is currently possible with the ordinary Azure Web App Service; that is, require authentication through AAD as in the above linked question, but furthermore restrict access to members of the relevant tenant? If so, what might the corresponding <code>routes.json</code> look like?</p>
  <p>See also <a href="https://github.com/MicrosoftDocs/azure-docs/issues/68279" rel="nofollow noreferrer">this GitHub issue</a>.</p>