

A reference back to an application object through the application ID property.For any given application, it can have at most one application object (which is registered in a "home" directory), and one or more service principal objects representing instances of the application in every directory in which it acts. Service principals are what govern an application connecting to Azure AD and can be considered the instance of the application in your directory. You can manage service principals in the Azure portal through the Enterprise Applications experience. What are service principals and where do they come from? Many others including various developer experiences in Azure and in API explorer experiences across developer centers.Using the Microsoft Graph API or PowerShell to create a new application.When an admin adds an application from the app gallery (which will also create a service principal).Creating a new application using Visual Studio and configuring it to use Azure AD authentication.Application registrations in the Azure portal.User provisioning metadata and configurationĪpplication objects can be created through multiple pathways, including:.Single sign-on (SSO) metadata and configuration.

Published APIs/resources/scopes (OAuth).Secrets (symmetric and/or asymmetric keys used to authenticate the application).The application object may include (but not limited to) any of the following: The application object will only exist in its home directory, even if it's a multi-tenant application supporting service principals in other directories. Application objects describe the application to Azure AD and can be considered the definition of the application, allowing the service to know how to issue tokens to the application based on its settings. You can manage application objects in the Azure portal through the App registrations experience. What are application objects and where do they come from? Service principals generally reference an application object, and one application object can be referenced by multiple service principals across directories. Service principals - Can be considered an instance of an application.Application objects - Although there are exceptions, application objects can be considered the definition of an application.There are two representations of applications in Azure Active Directory (Azure AD):
