How to enforce authorization with Azure AD

[eelkevanfoeken]

I am building a vanna ai application in azure. And currently am using azure ad with an external configuration tenant to enable 2fa. It works that users first need to authenticate through azure ad before being able to use the vanna ai service. But I would like to have vanna load the azure user as a vanna user, do you know what I mean? But vanna has its own user and permission management. How would you do this?