Skip to content

Commit 772f163

Browse files
Merge pull request #250323 from davidmu1/updatesteps34
updated sign-in steps for admin center
2 parents 2e30b5e + c7b8dec commit 772f163

File tree

1 file changed

+8
-9
lines changed

1 file changed

+8
-9
lines changed

articles/active-directory/develop/app-objects-and-service-principals.md

Lines changed: 8 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -21,11 +21,11 @@ This article describes application registration, application objects, and servic
2121

2222
## Application registration
2323

24-
To delegate identity and access management functions to Azure AD, an application must be registered with an Azure AD tenant. When you register your application with Azure AD, you're creating an identity configuration for your application that allows it to integrate with Azure AD. When you register an app in the Azure portal, you choose whether it's a [single tenant](single-and-multi-tenant-apps.md#who-can-sign-in-to-your-app), or [multi-tenant](single-and-multi-tenant-apps.md#who-can-sign-in-to-your-app), and can optionally set a [redirect URI](reply-url.md). For step-by-step instructions on registering an app, see the [app registration quickstart](quickstart-register-app.md).
24+
To delegate identity and access management functions to Azure AD, an application must be registered with an Azure AD tenant. When you register your application with Azure AD, you're creating an identity configuration for your application that allows it to integrate with Azure AD. When you register an app, you choose whether it's a [single tenant](single-and-multi-tenant-apps.md#who-can-sign-in-to-your-app), or [multi-tenant](single-and-multi-tenant-apps.md#who-can-sign-in-to-your-app), and can optionally set a [redirect URI](reply-url.md). For step-by-step instructions on registering an app, see the [app registration quickstart](quickstart-register-app.md).
2525

26-
When you've completed the app registration, you have a globally unique instance of the app (the application object) that lives within your home tenant or directory. You also have a globally unique ID for your app (the app/client ID). In the portal, you can then add secrets or certificates and scopes to make your app work, customize the branding of your app in the sign-in dialog, and more.
26+
When you've completed the app registration, you have a globally unique instance of the app (the application object) that lives within your home tenant or directory. You also have a globally unique ID for your app (the app/client ID). You can add secrets or certificates and scopes to make your app work, customize the branding of your app in the sign-in dialog, and more.
2727

28-
If you register an application in the portal, an application object and a service principal object are automatically created in your home tenant. If you register/create an application using the Microsoft Graph APIs, creating the service principal object is a separate step.
28+
If you register an application, an application object and a service principal object are automatically created in your home tenant. If you register/create an application using the Microsoft Graph APIs, creating the service principal object is a separate step.
2929

3030
## Application object
3131

@@ -37,7 +37,7 @@ The application object describes three aspects of an application:
3737
- The resources that the application might need to access
3838
- The actions that the application can take
3939

40-
You can use the **App registrations** page in the [Azure portal] to list and manage the application objects in your home tenant.
40+
You can use the **App registrations** page in the [Microsoft Entra admin center](https://entra.microsoft.com) to list and manage the application objects in your home tenant.
4141

4242
![App registrations blade](./media/app-objects-and-service-principals/app-registrations-blade.png)
4343

@@ -51,15 +51,15 @@ There are three types of service principal:
5151

5252
- **Application** - This type of service principal is the local representation, or application instance, of a global application object in a single tenant or directory. In this case, a service principal is a concrete instance created from the application object and inherits certain properties from that application object. A service principal is created in each tenant where the application is used and references the globally unique app object. The service principal object defines what the app can actually do in the specific tenant, who can access the app, and what resources the app can access.
5353

54-
When an application is given permission to access resources in a tenant (upon registration or consent), a service principal object is created. When you register an application using the Azure portal, a service principal is created automatically. You can also create service principal objects in a tenant using Azure PowerShell, Azure CLI, Microsoft Graph, and other tools.
54+
When an application is given permission to access resources in a tenant (upon registration or consent), a service principal object is created. When you register an application, a service principal is created automatically. You can also create service principal objects in a tenant using Azure PowerShell, Azure CLI, Microsoft Graph, and other tools.
5555

5656
- **Managed identity** - This type of service principal is used to represent a [managed identity](../managed-identities-azure-resources/overview.md). Managed identities eliminate the need for developers to manage credentials. Managed identities provide an identity for applications to use when connecting to resources that support Azure AD authentication. When a managed identity is enabled, a service principal representing that managed identity is created in your tenant. Service principals representing managed identities can be granted access and permissions, but can't be updated or modified directly.
5757

5858
- **Legacy** - This type of service principal represents a legacy app, which is an app created before app registrations were introduced or an app created through legacy experiences. A legacy service principal can have credentials, service principal names, reply URLs, and other properties that an authorized user can edit, but doesn't have an associated app registration. The service principal can only be used in the tenant where it was created.
5959

6060
The Microsoft Graph [ServicePrincipal entity][ms-graph-sp-entity] defines the schema for a service principal object's properties.
6161

62-
You can use the **Enterprise applications** page in the Azure portal to list and manage the service principals in a tenant. You can see the service principal's permissions, user consented permissions, which users have done that consent, sign in information, and more.
62+
You can use the **Enterprise applications** page in the Microsoft Entra admin center to list and manage the service principals in a tenant. You can see the service principal's permissions, user consented permissions, which users have done that consent, sign in information, and more.
6363

6464
![Enterprise apps blade](./media/app-objects-and-service-principals/enterprise-apps-blade.png)
6565

@@ -80,7 +80,7 @@ You can find the service principals associated with an application object.
8080

8181
# [Browser](#tab/browser)
8282

83-
In the [Azure portal](https://portal.azure.com), navigate to the application registration overview. Select **Managed application in local directory**.
83+
In the Microsoft Entra admin center, navigate to the application registration overview. Select **Managed application in local directory**.
8484

8585
:::image type="content" alt-text="Screen shot that shows the Managed application in local directory option in the overview." source="./media/app-objects-and-service-principals/find-service-principal.png" border="false":::
8686

@@ -127,7 +127,7 @@ In this example scenario:
127127

128128
Learn how to create a service principal:
129129

130-
- [Using the Azure portal](howto-create-service-principal-portal.md)
130+
- [Using the Microsoft Entra admin center](howto-create-service-principal-portal.md)
131131
- [Using Azure PowerShell](howto-authenticate-service-principal-powershell.md)
132132
- [Using Azure CLI](/cli/azure/create-an-azure-service-principal-azure-cli)
133133
- [Using Microsoft Graph](/graph/api/serviceprincipal-post-serviceprincipals) and then use [Microsoft Graph Explorer](https://developer.microsoft.com/graph/graph-explorer) to query both the application and service principal objects.
@@ -136,4 +136,3 @@ Learn how to create a service principal:
136136

137137
[ms-graph-app-entity]: /graph/api/resources/application
138138
[ms-graph-sp-entity]: /graph/api/resources/serviceprincipal
139-
[Azure portal]: https://portal.azure.com

0 commit comments

Comments
 (0)