Authentication and Authorization

Enabling Easy Auth (Azure AD authentication)

1. Open Azure Portal and navigate to the deployed M365 Workplace Cloud Storage app service.
2. Select Authentication / Authorization under Settings and enable App Service Authentication.
3. Set Action to take when request is not authenticated to Log in with Azure Active Directory.
4. Configure Azure Active Directory as the Authentication Provider
   • Set Management mode to Express.
   • Create a new AD App or select an existing if you have already registered an AD App for M365 Workplace Cloud Storage
5. Save the changes
6. Navigate to Overview and click the URL of M365 Workplace Cloud Storage
7. If Service is not starting or Authentication fails wait a few moments
8. Accept requested permissions
9. Check Consent on behalf of your organization if you want to accept the requested permissions for all users within your organization

Authorize users or groups

Enable authorization for M365 Workplace Cloud Storage

1. Open Azure Portal and navigate to Azure Active Directory
2. Click Enterprise applications from the blade
3. Select the app you have created in the steps before
4. Click Properties from the Manage section
5. Set User assignment required to Yes

Grant specific users and groups access to M365 Workplace Cloud Storage

1. Click Users and groups
2. Click Add user
3. You can grant access to the application to specific user or groups