Configuring application registration
When you want to use Azure AD as the identity provider (IdP) for an application, you need to register the application with Azure AD. Registering an application with Azure AD establishes a trust relationship between the application (trusting) and the Microsoft Azure AD identity platform (trustee).
Understanding application registration
The registration process allows Azure AD to understand the details of the application, such as the URL of the service, and where to send authentication replies. Applications can request access to Azure resources, so be sure to carefully examine what permissions are needed.
In addition to providing the basic details of the application, registration also grants the following benefits:
- Allows for branding customization of the sign-in dialog box
- Allows you to limit the scope of sign-in: single-tenant, for applications that are only accessible to your own organization’s users or multi-tenant...