Application registration

Concept

An application registration in Microsoft Entra ID is the global definition of an app, describing its name, redirect URIs, token settings and requested permissions; it is used to create service principals in tenants.

Title graphic: Application registration (Concept)

Type	Concept
Also known as	App registration, Application registrations, Application object

Key points about Application registration

Application registrations define an app's global identity, and service principals are its local identity in a tenant where permissions are granted. · Entra Workload Identities - Simply Explained
Setup involves firewall rules, role-based access and app registration. · Connect Azure SQL to Copilot Studio Through a…
Secure the connector with an Azure AD app registration, OAuth2, minimal app roles and secret rotation. · Expose Dynamics 365 APIs with Power Platform…

Episodes about Application registration

Service Accounts vs App Registrations for Power Automate…

2025-11-23 · Video on YouTube

Your Power Automate email flows aren’t clever automations, they’re HR risk wrapped in HTML. You wire a flow to a “service account,” fight through MFA once, get it working, and decide it’s done. It’s not done. It’s brittle, over-privileged, impossible to audit…

Entra Workload Identities - Simply Explained

2026-08-05 · Video on YouTube

Apps, pipelines and AI agents need access too, yet many still hide passwords in code and config files. In this Simply Explained episode, Mirko Peters gives Azure admins, developers and architects a plain-English map of Microsoft Entra workload identities…

D365FO Integration Architecture with Anitha Eswaran…

2026-05-10 · Video on YouTube

In this episode of the M365.fm podcast, Mirko Peters speaks with Microsoft MVP and MCT Anitha Eswaran about the realities of integrating Dynamics 365 Finance & Operations (D365FO) into modern enterprise environments. The discussion focuses on why integrations…

Audit SharePoint Online Permissions at Scale

2025-08-14 · Video on YouTube

Manual SharePoint reviews don’t scale. Use PnP PowerShell + Microsoft Graph + Azure Automation to enumerate every site, expand nested/group/inherited permissions, and deliver a clean, daily report. App-only auth, throttling-safe queries, and diff alerts turn…

Compliance as Code

2026-07-11 · Video on YouTube

Compliance is often treated as a documentation exercise—something organizations prepare for audits rather than embed into their daily operations. In this episode, we challenge that mindset by exploring the concept of Compliance as Code and why modern…

Connect Azure SQL to Copilot Studio Through a Data Gateway

2025-11-13 · Video on YouTube

Your Copilot sounds smart but secretly knows nothing about your business. It’s guessing from Wikipedia while your real memory—orders, invoices, inventory—sits locked in SQL Server behind the firewall. This episode exposes the fix: the Power Platform Data…

Expose Dynamics 365 APIs with Power Platform Custom…

2025-08-05 · Video on YouTube

Exposing Dynamics 365 APIs through custom connectors in Power Platform enables secure, scalable integration between business applications, automation workflows, and external systems. But improper configuration can introduce security risks, performance issues…

Test Microsoft 365 Apps with Visual Studio Dev Tunnels

2025-08-16 · Video on YouTube

Dev Tunnels in Visual Studio let you expose your local Teams, SharePoint, or Power Platform services to the internet in minutes—no Azure deploys required. Configure a named, persistent tunnel and use Private (authenticated) access tied to Microsoft Entra ID…

Fix Multi-Tenant SPFx Authentication

2025-08-05 · Video on YouTube

Shipping a SharePoint Framework app to another tenant and watching auth blow up, Graph return nothing, and users not even see the web part? You’re not cursed—multi-tenant SPFx is. In this episode, I show the exact authentication traps that tank cross-tenant…

Microsoft Graph App-Only Consent Explained

2025-08-05 · Video on YouTube

Stop blindly clicking “Grant admin consent.” This deep dive demystifies Microsoft Graph app-only permissions—who consents, which scopes you actually need, and how tokens really work in production. Learn least-privilege setups, admin consent gotchas…

Timeline of episodes about Application registration

Articles about Application registration (5)

App Registration and OAuth Guide for Secure Application Integration
2026-05-04 · Mirko Peters
Register your app with OAuth 2.0. Understand the authorization code flow for secure access, a key part of the OAuth 2.0 authorization code grant.
Managed Identities vs App Registrations in Azure: Key Differences and Best Practices
2026-04-28 · Mirko Peters
If you’re building or securing anything serious in Azure these days, wrapping your head around managed identities and app registrations isn’t optional&m…
AADSTS81016 Invalid Resource: Fixing Azure AD Authentication Errors
2026-04-22 · Mirko Peters
Running into the AADSTS81016 Invalid Resource error in Azure AD can stop a Microsoft 365 project or app deployment in its tracks. This error means Azure is blocking…
Fixing AADSTS700025 Invalid JWT Errors in Azure AD
2026-04-21 · Mirko Peters
If you're bumping into the AADSTS700025 error—otherwise known as the dreaded “invalid JWT” message—during Azure Active Directory authenticat…
Solving the AADSTS700054 Response Type Not Enabled Problem in Azure AD Apps
2026-04-21 · Mirko Peters
Ever bumped into the AADSTS700054 error and wondered, “What did I mess up this time?” You’re not alone. This error is notorious for appearing righ…

Frequently asked questions

What security steps does the setup include?

The show notes mention role-based access control, firewall rules for trusted IP addresses and app registration in Azure to create a secure trust relationship. Together they protect the SQL data behind the gateway. · From the episode: Connect Azure SQL to Copilot Studio Through a…

How do you secure a custom connector?

Create a single-tenant Azure AD app registration with OAuth2, grant minimal Graph or Dataverse app roles, choose delegated or service principal access, configure the redirect URL and plan secret rotation. · From the episode: Expose Dynamics 365 APIs with Power Platform…

Why use a named persistent tunnel?

A named, persistent tunnel keeps its address stable between sessions. That keeps your OAuth redirect URIs valid, so you do not have to reconfigure the app registration every time you restart testing. · From the episode: Test Microsoft 365 Apps with Visual Studio Dev…

Why does SPFx authentication break in another tenant?

Multi-tenant is hard mode because of identity boundaries, consent and unpredictable site architectures. Common mistakes are a single-tenant app registration, believing consent is one-time, and secrets in code. · From the episode: Fix Multi-Tenant SPFx Authentication

What is the consent gap in Microsoft Graph app-only access?

Tutorials skip the lifecycle: app registration, permission choice, admin consent, token acquisition and monitoring. Once consented, app-only scopes apply tenant-wide and persist until explicitly revoked. · From the episode: Microsoft Graph App-Only Consent Explained

Glossary

Community wiki

Short info above, community knowledge below: add practical tips, examples or corrections. New contributions are reviewed first; trusted members publish directly.

Experts and companies for this topic

Nobody has listed this topic yet. Add it to your profile.

Sources

Feed for this topic (RSS): entity/app-registration/feed.xml
M365.FM episodes on this topic: 10
Articles on this topic: 5

Maintained by Mirko Peters (Microsoft MVP) · Last updated: 2026-11-06