@robotdan said in Can You Limit a User's Login/Authentication Access to Applications within a Single Tenant?:

We do have some configuration in plan to allow this behavior to be configured per application. Once available this configuration would allow you to specify if you want this login request to return 401 to indicate the user is not authorized to the requested resource.

So would I be right in thinking, currently FusionAuth can't stop someone with an authenticated account using a application, but this is coming?

So basically is up to the application itself to check if they're authorised to use the app?

Jonny