Registering and configuring applications
In the AAD basics section, we analyzed the twofold nature of an application in AAD. We know that an application has a definition that lives in the home tenant (the tenant where it has been effectively created) and a service principal, which is an instance of an application definition that can live both in the home tenant and within an external AAD tenant, where it will be created as a dedicated new instance. The service principal inherits the application definition permissions and applies them to the resources that live in the same tenant where it has been instantiated.
AAD provides several ways to manage its services:
- AAD admin center (https://aad.portal.azure.com)
- Microsoft Entra admin center (https://entra.microsoft.com)
- AAD PowerShell
- The Azure CLI
- Microsoft Graph API
The examples that will be described in this paragraph use the Microsoft Entra admin center, which has been released recently and still has...