Enable Admins to Access Two Apps, While Limiting Users to One

Get Help
,
1

Hello,

In one tenant I have 2 applications (let’s say admin app and main app). I need to configure authorization and SSO flow so that Admins can log in and have SSO enabled for both admin app and main app. But Users can log in only in main app. Does it make sense? Are there any ways to achieve this flow?

Thanks for your help!