Learning about application and service principal objects in Azure AD

When the application is registered in the Azure AD tenant, it will get a unique identifier that is shared with the Microsoft identity platform when it requests tokens. The registered application is called an application object inside the Microsoft identity platform. The platform uses the application object to create one or more service principal(s). This service principal represents an application within a specific directory or tenant. When a user signs into a multi-tenant application from a specific tenant, Azure AD creates a service principal, also known as an enterprise app, in that tenant. The service principal is used by tenant administrators to control how the application runs in that tenant. The service principal is associated with the application's registration.

Application object

An Azure AD application is defined by its one and only application object. This application object is stored in the...