diff --git a/README.md b/README.md
index cb1472c3c..ca0ce541b 100644
--- a/README.md
+++ b/README.md
@@ -150,6 +150,7 @@ This repository is an extension of CloudSploit's [open-source scanning engine](h
* [Password Requires Numbers](en/azure/activedirectory/password-requires-numbers.md)
* [Password Requires Symbols](en/azure/activedirectory/password-requires-symbols.md)
* [Password Requires Uppercase](en/azure/activedirectory/password-requires-uppercase.md)
+ * [Azure AD App Organisational Directory Access](en/azure/activedirectory/app-orgnaizational-directory-access.md)
* App Service
* [.NET Framework Version](en/azure/appservice/.net-framework-version.md)
* [Authentication Enabled](en/azure/appservice/authentication-enabled.md)
diff --git a/en/azure/activedirectory/app-orgnaizational-directory-access.md b/en/azure/activedirectory/app-orgnaizational-directory-access.md
new file mode 100644
index 000000000..cad516530
--- /dev/null
+++ b/en/azure/activedirectory/app-orgnaizational-directory-access.md
@@ -0,0 +1,24 @@
+[![CloudSploit](https://cloudsploit.com/img/logo-new-big-text-100.png "CloudSploit")](https://cloudsploit.com)
+
+# AZURE / Active Directory / Azure AD App Organisational Directory Access
+
+## Quick Info
+
+| | |
+|-|-|
+| **Plugin Title** | Azure AD App Organisational Directory Access |
+| **Cloud** | AZURE |
+| **Category** | Active Directory |
+| **Description** | Ensures that Azure Active Directory applications are accessible to accounts in organisational directory only. |
+| **More Info** | AAD provides different types of account access. By using single-tenant authentication, the impact gets limited to the application’s tenant i.e. all users from the same tenant could connect to the application and save app from unauthorised access. |
+| **AZURE Link** | https://learn.microsoft.com/en-us/azure/active-directory/develop/single-and-multi-tenant-apps |
+| **Recommended Action** | Modify the Azure app authentication setting and provide access to accounts in organisational directory only. |
+
+## Detailed Remediation Steps
+1. Log in to the Microsoft Azure Management Console.
+2. Find the search bar at the top and search for Azure Active Directory and Select the "Azure Active Directory"
+3. On the Active Directory Overview page Click on "App Registration" under "Manage" from left navigation panel.
+4. On App Registrations page Click on the App name for which you want to change the access.
+5. On App details page Click on "Authentication" under the "Manage" section from left navigation panel.
+6. On Authentication details page under the "Supported Account Types" select multi-tenant access and Click "Save" on the bottom of the page.
+
diff --git a/resources/azure/activedirectory/app-orgnaizational-directory-access/step2.png b/resources/azure/activedirectory/app-orgnaizational-directory-access/step2.png
new file mode 100644
index 000000000..bcbbd3746
Binary files /dev/null and b/resources/azure/activedirectory/app-orgnaizational-directory-access/step2.png differ
diff --git a/resources/azure/activedirectory/app-orgnaizational-directory-access/step3.png b/resources/azure/activedirectory/app-orgnaizational-directory-access/step3.png
new file mode 100644
index 000000000..306e8c214
Binary files /dev/null and b/resources/azure/activedirectory/app-orgnaizational-directory-access/step3.png differ
diff --git a/resources/azure/activedirectory/app-orgnaizational-directory-access/step4.png b/resources/azure/activedirectory/app-orgnaizational-directory-access/step4.png
new file mode 100644
index 000000000..6127be782
Binary files /dev/null and b/resources/azure/activedirectory/app-orgnaizational-directory-access/step4.png differ
diff --git a/resources/azure/activedirectory/app-orgnaizational-directory-access/step5.png b/resources/azure/activedirectory/app-orgnaizational-directory-access/step5.png
new file mode 100644
index 000000000..dd6ee857a
Binary files /dev/null and b/resources/azure/activedirectory/app-orgnaizational-directory-access/step5.png differ
diff --git a/resources/azure/activedirectory/app-orgnaizational-directory-access/step6.png b/resources/azure/activedirectory/app-orgnaizational-directory-access/step6.png
new file mode 100644
index 000000000..3eeb129e4
Binary files /dev/null and b/resources/azure/activedirectory/app-orgnaizational-directory-access/step6.png differ