►
Description
#multitenancy #saas #microsoft365 #azure
Multitenancy is an architecture where multiple tenants share the same physical instance of an app. In this video, you'll learn how to create multi-tenant apps with Microsoft Cloud Advocates Bob German and Rabia Williams. They will convert a JavaScript Single Page Application to a multi-tenant application, all while explaining the concept of multi-tenant apps.
👀 Want to learn about multitenancy in blog form? Read more here: https://devblogs.microsoft.com/microsoft365dev/multi-tenant-architecture-for-saas-apps/
🔑 The authentication flow used in this sample project is OAuth 2.0 auth code grant.
📊 You will also learn how to get Microsoft 365 data using Microsoft Graph: https://developer.microsoft.com/en-us/graph
💻The base code sample used is here https://github.com/MicrosoftDocs/mslearn-retrieve-m365-data-with-msgraph-quickstart
► Microsoft 365 code | decode is a new series that focuses on breaking down topics for developers to understand concepts better. Subscribe to the Microsoft 365 Developer on YouTube for more videos like this: https://www.youtube.com/Microsoft365Developer?sub_confirmation=1
🔗 Links 🔗
If you find these concepts interesting and want to learn more about developing apps for Microsoft 365 then check out the below links:
❤ Join the M365 developer program https://aka.ms/m365cd-join-pgm
❤ Tenancy in Azure Active Directory https://docs.microsoft.com/en-us/azure/active-directory/develop/single-and-multi-tenant-apps?WT.mc_id=m365-38318-cxa
❤ What is multitenancy? https://docs.microsoft.com/en-us/azure/architecture/multitenant-identity/?WT.mc_id=m365-38318-cxa#what-is-multitenancy
❤ Fundamentals of Microsoft Graph https://docs.microsoft.com/en-gb/learn/paths/m365-msgraph-fundamentals/?WT.mc_id=m365-38318-cxa
A
B
So
I'll
bet
everybody
out.
There
probably
knows
that
microsoft
365
is
a
suite
of
applications
that
work
together
and
a
lot
of
them
are
really
familiar.
Like
word,
excel
powerpoint
microsoft
teams
is
really
big.
These
days,
sharepoint
huge
community
around
sharepoint
right,
a
tenant
is
basically
where
all
of
these
tools
are
working
together
and
they're
managed
under
a
single
security
system
called
azure
active
directory,
I
should
probably
say
a
single
identity
system.
B
So
what
happens?
Is
that
each
azure
active
directory
and
the
tools
are
organized
into
something
called
a
tenant,
so
the
users
who
use
them
are
also
registered
inside
of
that
same
azure,
ad
and
part
of
the
same
tenant,
and
so
it
basically
creates
a
virtual
boundary
in
which
all
the
users
and
their
data
and
the
applications
they
use
are
all
kind
of
self-contained.
Because
you
know
microsoft,
365
is
a
secured
environment.
B
It's
not
like
people
are
sharing
all
of
their
business
documents
and
and
messages
and
stuff
with
the
whole
world.
So
this
is
kind
of
how
everything
is
separated
right
and
then
there's
also
the
option
of
having
a
some
guest
users
come
in
from
outside
of
the
tenant.
Although
we're
not
going
to
get
into
that,
it's
it's
part
of
the
azure
ad
functionality
called
b2b
or
business
to
business.
That
allows
other
people
from
other
tenants
in
to
collaborate.
A
B
A
Right
so
I
have
this
application,
so
this
app
basically
is
a
javascript
single
page
application
that
connects
to
m365
data
in
a
very
secure
fashion
and
get
some
data
out
of
it
in
my
tenant,
and
this
is
something
that
I've
worked
on
for
in
my
developer
tenant
and
I
have
to
be
very
honest
with
you.
I
have
seen
the
options
for
multi-tenant,
apps
and
stuff,
but
I
really
don't
understand
why
I
should
use
a
multi-tenant
app
or
you
know
what
is
the
purpose?
A
What
is
really
the
use
of
it
or
how
to
begin?
You
know
that's
something
that
I'm
really
finding
it
hard
or
I'm
struggling
to
sort
of,
even
you
know,
make
my
single
tenant
app
into
a
multi-tenant
app.
So
these
are
the
questions
that
I
have
you
know.
How
do
I
start?
What
are
the
benefits
and
things
like
that
so
before
we
jump
into
these
questions
bob,
what
I
would
do
is,
I
would
actually
show
you
the
app
that
I
have
and
then
we
could
probably.
A
A
So
we
have
the
a
simple
application:
we've
got
the
open
source
and
we
would
put
the
link
down
in
the
description
for
you
to
clone
as
well.
So
this
is
a
javascript
application,
a
single
page
application
to
retrieve
m365
data
using
microsoft
graph
and
all
what
we
are
doing
here
is
just
showing
the
username
from
m365
data
and
and
that's
just
it.
So
it's
the
simplest
app
that
you
can
find
to
go
ahead
and
implement
this
concept.
So.
B
A
I
already
have
it
cloned
in
my
machine,
so
I'm
just
gonna
open
that
up
in
my
visual
studio
code.
So
let's
just
open
that-
and
this
is
basically
the
structure
bob
like
this-
is
the
simplest
structure
of
this
project.
We've
got
of
js
file,
which
is
where
all
the
authentication
magic
happens,
and
then
we
have
graph
dot
js,
which
is
where
we're
calling
the
sdk
to
get
the
m365
data.
We've
got
some
simple
html
here
and
very
complex,
welcome
message
that
shows.
B
A
Username-
and
you
also
have
the
ui.js,
which
is
basically
you
know
it
all
ties
together
and
show
the
ui
of
this
app
and
now
this
readme
file
is
to
be
honest
with
you.
I've
actually
gone
through
this,
and
you
know
I
know
some
of
the
steps
so
I'll
I'll,
probably
cheat
and
we'll
you
know
make
this
a
bit
more
faster.
A
So
let's
just
go
ahead
and
do
an
app
registration
and
all
the
steps
that
you
need
to
do
is
actually
in
this
application.
So
I'm
just
going
to
speed
things
up
a
bit
here:
okay,
yeah,
so
I'm
opening
up
office.com
here,
which
is
the
place
I
go
to.
If
I
want
to
get
to
any
apps
or
any
settings
or
anything
in
my
m365
10
in
and
on
the
left
side,
you
can
see
the
admin
gear
icon,
which
is
where
you
would
go
if
you
want
to
go
to.
A
So
if
you
want
to
go
to
azure
active
directory
and
create
an
application,
this
is
where
you
would
go.
So
I'm
just
going
to
click
on
that,
and
that
would
take
me
to
the
other
settings.
You
know
teams
or
sharepoint
or
whatnot.
I've
got
all
this
in
one
place
and
if
you
scroll
down,
you
can
see
here,
azure
active
directory
and
thanks
bob.
This
was
a
tip
from
you.
I
usually
just
go
directly
to
portal.azure.com,
but
this
is
so
much
easier
to
browse.
A
Yeah,
that's
right
all
right,
so
let's
jump
in
and
create
an
application
registration
for
my
app.
So
that's
a
separate
thing
right
bob.
We
have
an
sba
which
is
hosted
wherever
you
want
to
host
in
cloud
and
then
you
need
to
do
this
app
registration
for
your
authentication
to
work
with
azure
active
directory.
B
B
A
A
B
A
Yeah
cool
so
copying
the
application
id
and
I'm
just
going
to
come
back
to
the
auth.js
file.
So
I
can
see
here.
This
is
where
I
should
put
my
client
id:
it's
pretty
straightforward,
isn't
it
and
then
you
have?
You
need
your
directory
id,
which
is
again
your
tenant
id,
which
is
also
mentioned
here
directory
id.
So
I'm
just
gonna
copy
that
and
come
back
in.
A
B
A
B
A
A
A
A
A
A
B
A
Cool
so
now
my
app
it's
restarted,
I'm
just
going
to
open
up
a
new
browser
tab
and
go
to
the
app.
So
it's
now
online,
so
yeah.
So
I'm
going
to
sign
in
it
shows
me
the
same
exact
data.
Now
our
main
thing
that
we're
going
to
try
out
bob
is
that
you're
going
to
go
into
this
url
and
try
to
run
my
app
in
your
tenant
right.
A
A
B
A
A
B
A
A
B
A
B
A
A
It's
not
so
you
you
have
it
registered
once
and
then
you
want
to
distribute
this
app.
That's
where
you
want
it
to
be
multi-tenant
now
the
question
for
you
bob
here
is:
I
have
no
idea
how
to
do
this
like
how
to
change
the
app
both
in
code
and
the
registration
part
and
how
to
make
this
seamless
so
that
I
can
distribute
this
without
them
actually
getting
to
do
like
10
different
steps
to
get
this
working.
B
A
B
B
A
B
A
B
A
A
B
A
A
B
B
A
B
B
A
A
A
A
B
Okay,
here
we
are
so
a
bit
more
permission
and
that's
just
the
way
that
that
it
was
structured.
I
remember
that
that
single
page
app
we
broke
it
down,
so
it
asked
for
a
little
bit
at
a
time
hey
here.
I
am
I'm
now
I'm
impersonating
megan
again,
but
but
you
can
see
it's
working
perfectly
now.
What
happened
under
the
covers
is
the
inside
of
azure
active
directory.
If
I
look
under
my
registrations
and
what
was
that
one
called
again
well
anyway,
it's
not
it's
not
here.
B
B
What
if
you
want
to
sell
that
app
to
another
company
someday
or
what,
if
the
app
just
has
different
administrative
rules,
different
admins
for
the
app
versus
for
people
just
using
microsoft,
365
inside
your
company,
it's
always
better
to
make
a
separate
tenant
just
for
hosting
the
app
just
for
for
registering
the
app
in
production
anyway.
There's
this
other
thing,
which
I
think
is
confusingly
named
enterprise
applications
is
actually
where
we
store
these
things
called
service
principles.
So
this
is
the
other
half
of
that
registration.
B
B
You'll
see
that
there
was
no
admin
consented.
Remember
I
didn't
allow
right
now.
If
the
admin
wanted
to
consent
for
everybody,
so
that
they
don't
get
any
more
pop-ups,
you
could
click
right
there
and
instead
I'm
going
to
go
into
the
user
consent.
Here
are
the
three
permissions
that
I
consented
to,
and
here
is
looks
like
one:
you
did
it
and
it
should
be
megan
there.
She
is
because
that's
who
I
was
logged
in
when
I.
A
B
A
B
And
inside
of
there
the
we
had
the
app
registration,
which
is
the
little
tic
tac
toe
board
with
the
there's
a
little
cube
next
to
it,
and
then
we
also
had
the
enterprise
app
or
service
principle,
which
is
the
little
rubik's
cube
with
the
little
green
thing
that
is
also
in
your
tenant.
So
everything
was
in
one
tenant,
which
is
great
if
you're
deploying
it
for
for
a
customer
just
one
off.
B
But
if
you
want
to
scale
it,
you
need
to
do
what
we
just
did
and
what
ends
up
happening
is
that
each
customer
or
client
gets
its
own
service
principle
and
but
there's
only
one
app
registration.
So
later
on,
you
change
the
app
registration,
no
problem,
you
just
change
it
in
the
home
tenant
people
are
going
to
maybe
be
asked
for
an
additional
consent,
but
they're
not
going
to
have
to
worry
about
any.
You
know
any
other
details.
B
It's
still
really
under
your
control,
and
the
other
thing
to
kind
of
point
out
is:
if
you're
testing
is
just
a
tip.
If
you're
testing
your
your
consent
logic,
you
might
want
to
force
a
consent
again,
and
I
remember
for
a
while
there
I
would
register
a
new
app
every
time
I
wanted
to
test
which
got
really
old
really
fast.
The
trick
is
just
come
in
here
and
delete.
B
It
may
be
scary,
make
sure
you're
deleting
the
enterprise
app
or
the
service
principle
and
not
the
registration,
but
you
can
come
in
here
and
delete
it
and
it
doesn't
actually
delete
anything
except
for
the
consent,
so
that
will
force
the
consent
again
and
yeah.
You
can
try
again
and
again
and
get
your
little
pop-up
working
or
whatever
it
is.
So
that's
that's.
It.
A
A
That's
the
benefit,
and
maybe
for
our
folks
here
for
our
audience.
We
do
have
a
trick
question.
So
if
you
are
in
the
m365
developer
space
and
if
you've
used
microsoft
graph
now
that's
a
clue.
You
are
probably
using
a
browser
tool,
browser-based
tool
which
is
a
multi-tenant
app
so
comment
and
in
the
comment
box
below
and
let
us
know
if
you
know
the
answer.