Starting with CDESK version 3.2.6, it is possible to allow external users to sign in from various Microsoft Entra ID tenants (multi-tenant authentication). This setting ensures that users can log in using their Office 365 account regardless of which tenant they are in, provided they have an account created in CDESK with the corresponding email address.
To use this feature, you must first configure basic authentication via Microsoft Entra ID. If you haven’t done so yet, we recommend reviewing the settings for basic authentication with MS Entra ID.
Below is a detailed procedure for enabling multi-tenant authentication either when creating a connector or in an existing connector.
Multi-Tenant Settings When Connecting CDESK to MS Entra ID for the First Time
If you haven’t yet created a connector or registered an app in Microsoft Entra ID, please review and the basic Microsoft Entra ID authentication setup at. During this setup, you only need to make two changes.
1. Enabling Multi-Tenant in the CDESK connector
When creating a Microsoft Entra ID Authentication connector in CDESK (CDESK → Global settings → Connectors, API), enable the Multi-Tenant toggle.
Tip: If you have already created the connector, you can modify it by following the instructions in the next section of this guide.
2. Registering the CDESK application in Microsoft Entra ID
When registering the CDESK application in Microsoft Entra ID, go to Supported account types and select the option Accounts in any organizational directory (Any Microsoft Entra ID tenant – Multitenant). This setting ensures that authentication will work for users from other tenants as well.
Configuring Multi-Tenant for an existing connector and a CDESK application registered in Microsoft Entra ID
Go to CDESK → Global settings → Connectors, API and locate the Microsoft Entra ID Authentication connector you created. Once opened, enable the Multi-Tenant toggle. Save your changes by clicking the Save button.
Next, go to office.com and sign in with an Office 365 account that has permissions to administer MS Entra ID. In the app menu on the left side of the window, locate the Admin app.
Clicking this will open the administrator’s home screen. In the menu on the left, select Show all. In the expanded menu, click Identity.
A new window will open. In the left-hand menu, select App registrations. Next, open the All applications tab, search for and open the registered CDESK application from the connector. Verify that this is the correct application—you can do this by comparing the Application (client) ID.
After opening the app, go to the Authentication section and scroll down to the Supported account types section. Select the option Accounts in any organizational directory (Any Microsoft Entra ID tenant – Multitenant). Don’t forget to save your settings by clicking the Save button.
Granting app permissions upon first login
Please note that Microsoft will require users to grant app permissions the first time they sign in. The administrator of each tenant from which users will sign in can check the box “Consent on behalf of your organization” during the first sign-in, thereby granting Admin Consent for the entire organization. This ensures that the application will work for that tenant without further consent prompts for other users in the organization. Without the administrator’s consent, each user will have to grant these permissions themselves.
You can also grant Admin Consent via the Microsoft Entra ID portal, under Enterprise applications. Select the relevant application, go to Permissions, and click Grant admin consent for your company.
