diff --git a/Microsoft.SystemForCrossDomainIdentityManagement/Service/Controllers/RootController.cs b/Microsoft.SystemForCrossDomainIdentityManagement/Service/Controllers/RootController.cs
index b5d0320c..41ed1eb5 100644
--- a/Microsoft.SystemForCrossDomainIdentityManagement/Service/Controllers/RootController.cs
+++ b/Microsoft.SystemForCrossDomainIdentityManagement/Service/Controllers/RootController.cs
@@ -3,7 +3,9 @@
 namespace Microsoft.SCIM
 {
     using System;
+    using Microsoft.AspNetCore.Authorization;
 
+    [Authorize]
     public sealed class RootController : ControllerTemplate<Resource>
     {
         public RootController(IProvider provider, IMonitor monitor)