How to change from single tenant to multiple tenant in azure AD

Question

Originally when I setup my application in azure AD at work I selected single tenant. However, I actually need to use multi tenant (AzureADMultipleOrgs). When you try to change to multiple tenant in the UI in azure AD portal you get this message :

"Due to temporary differences in supported functionality, we don't recommend enabling personal Microsoft accounts for an existing registration. If you need to enable personal accounts, you can do so using the manifest editor. Learn more about these restrictions.​"

Then if you go to learn more about this it states you should be using the manifest to change this. So I change the value of "signInAudience" to AzureADMultipleOrgs and still when I go to sign in it is still askign me to use an email address for the single tenant (email address from that tenant domain). I thought changing this value would allow me to use any work or school/organization email address to sign in but nothing has changed. Am I doing something wrong because MS does not give much help to switch from single to multiple.

Answer 1

In order to change your application "Supported account type" from Single-Tenant to multi-Tenant, please check the following:

Go to Azure Portal -> Azure Active Directory -> App Registrations -> Your app -> Authentication

If you are using code to sign-in, make sure to change the below settings:

Authority = "https://login.microsoftonline.com/common";
Audience = "api://Your_App_ID";// Your Application ID URI

Please check this MsDoc that can help you in the process.

Due to temporary differences in supported functionality, we don't recommend enabling personal Microsoft accounts for an existing registration. If you need to enable personal accounts, you can do so using the manifest editor. Learn more about these restrictions

Please note that, after registering the application if you want to change the supported type to Personal Microsoft accounts, you cannot find that option and will get the above warning.

So, it suggests you to change it in Manifest. You can ignore that WARNING, if you are changing to multi-tenant.

If still the issue persists, please check the below references:

How to: Change the account types supported by an application - Microsoft Entra | Microsoft Docs

Validation differences by supported account types - Microsoft Entra | Microsoft Docs

azure-docs/howto-convert-app-to-be-multi-tenant.md at main · MicrosoftDocs/azure-docs · GitHub