title: How to allow users from only some specific tenants to be able to login to my app using Azure AD
body: <p>I am building an SPA using AngularJs and using Azure AD for authentication purpose. <strong>My app is a multi-tenanted.</strong> </p>
  
  <p>But, I can see that Azure AD is allowing users from any Tenant of any Active Directory to login to my app. </p>
  
  <p>They are just presented with a consent screen (after successful login) where they are asked whether they are comfortable with providing access to their information from the app, <strong>and if they clicked yes</strong>, then they are freely redirected to my app's home page (if they have callback url to my app).</p>
  
  <p>I tried modifying <strong>Manifest</strong> file of my app and adding some <strong>Tenants</strong> to the <code>knownClientApplications</code> property to allow users from only that <em>Tenant</em> but for no avail.  </p>
  
  <p>The AngularJs config code being:</p>
  
  <pre><code>adalProvider.init(
   {
       instance: AZURE_AD_INSTANCE,
       tenant: 'common',
       clientId: AZURE_AD_CLIENT_ID,
       extraQueryParameter: 'nux=1',
       //cacheLocation: 'localStorage', // enable this for IE, as sessionStorage does not work for localhost.
   }, $httpProvider);
  </code></pre>
  
  <p>where, AZURE_AD_INSTANCE and AZURE_AD_CLIENT_ID are login url and app's client id respectively.</p>
  
  <p>What could I do to allow users from only specific tenants and disallow others?</p>