Skip to content

signinaudiencerestrictionsbase.md

Latest commit

 

History

History
50 lines (37 loc) · 2.27 KB

signinaudiencerestrictionsbase.md

File metadata and controls

50 lines (37 loc) · 2.27 KB
title signInAudienceRestrictionsBase resource type
description The base type for the signInAudienceRestrictions property of an application
author psignoret
ms.date 11/14/2025
ms.localizationpriority medium
ms.subservice entra-applications
doc_type resourcePageType

signInAudienceRestrictionsBase resource type

Namespace: microsoft.graph

[!INCLUDE beta-disclaimer]

The base type for values used in an application resource's signInAudienceRestrictions property. This abstract type has two derived types that can be used:

  • unrestrictedAudience: Used to indicate that there are no restrictions to the signInAudience value. Single-tenant applications (AzureADMyOrg) can only be used in the tenant where the app is registered, and multitenant applications (AzureADMultipleOrgs and AzureADandPersonalMicrosoftAccount) can be used in any Microsoft Entra tenant.
  • allowedTenantsAudience: For multitenant applications with signInAudience set to AzureADMultipleOrgs, used to indicate that the application (representing a client app or an API) can only be used in the given list of Microsoft Entra tenants.

This type is an abstract type.

Important

Using the signInAudience and signInAudienceRestrictions properties to limit where an application can be used isn't a replacement for proper tenant validation and authorization enforcement in your application code. If your application expects access only in specific tenants, you must enforce that validation in your application code. To learn more, see Secure applications and APIs by validating claims.

Properties

Property Type Description
kind kind The kind of restrictions on what is allowed by the signInAudience value. The possible values are: unrestricted, allowedTenants, unknownFutureValue.

Relationships

None.

JSON representation

The following JSON representation shows the resource type.

{
  "@odata.type": "#microsoft.graph.signInAudienceRestrictionsBase",
  "kind": "String"
}