You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
In this tutorial, you'll learn how to register a confidential client application in Microsoft Entra ID.
16
+
In this tutorial, you learn how to register a confidential client application in Microsoft Entra ID.
17
17
18
-
A client application registration is a Microsoft Entra representation of an application that can be used to authenticate on behalf of a user and request access to [resource applications](register-resource-azure-ad-client-app.md). A confidential client application is an application that can be trusted to hold a secret and present that secret when requesting access tokens. Examples of confidential applications are server-side applications.
18
+
A client application registration is a Microsoft Entra representation of an application that can be used to authenticate on behalf of a user, and request access to [resource applications](register-resource-azure-ad-client-app.md). A confidential client application is an application that can be trusted to hold a secret and present that secret when requesting access tokens. Examples of confidential applications are server-side applications.
19
19
20
-
To register a new confidential client application, refer to the steps below.
20
+
To register a new confidential client application, use the following steps.
21
21
22
22
## Register a new application
23
23
@@ -41,10 +41,10 @@ To register a new confidential client application, refer to the steps below.
41
41
42
42
## API permissions
43
43
44
-
Permissions for Azure API for FHIR are managed through RBAC. For more details, visit [Configure Azure RBAC for FHIR](configure-azure-rbac.md).
44
+
Permissions for Azure API for FHIR are managed through role-based access control (RBAC). For more details, visit [Configure Azure RBAC for FHIR](configure-azure-rbac.md).
45
45
46
46
>[!NOTE]
47
-
>Use grant_type of client_credentials when trying to obtain an access token for Azure API for FHIR using tools such as Postman. For more details, visit [Testing the FHIR API on Azure API for FHIR](tutorial-web-app-test-postman.md).
47
+
>Use a `grant_type` of `client_credentials` when trying to obtain an access token for Azure API for FHIR using tools such as Postman. For more details, visit [Testing the FHIR API on Azure API for FHIR](tutorial-web-app-test-postman.md).
48
48
49
49
50
50
## Application secret
@@ -53,7 +53,7 @@ Permissions for Azure API for FHIR are managed through RBAC. For more details, v
1. Enter a **Description** for the client secret. Select the **Expires** drop-down menu to choose an expiration time frame, and then click**Add**.
56
+
1. Enter a **Description** for the client secret. Select the **Expires** drop-down menu to choose an expiration time frame, and then select**Add**.
57
57
58
58
:::image type="content" source="media/add-azure-active-directory/add-a-client-secret.png" alt-text="Add a client secret.":::
59
59
@@ -66,9 +66,10 @@ Permissions for Azure API for FHIR are managed through RBAC. For more details, v
66
66
67
67
## Next steps
68
68
69
-
In this article, you were guided through the steps of how to register a confidential client application in the Microsoft Entra ID. You were also guided through the steps of how to add API permissions in Microsoft Entra ID for Azure API for FHIR. Lastly, you were shown how to create an application secret. Furthermore, you can learn how to access your FHIR server using Postman.
69
+
In this article, you were guided through the steps of how to register a confidential client application in the Microsoft Entra ID. You were also guided through the steps of how to add API permissions in Microsoft Entra ID for Azure API for FHIR. Lastly, you were shown how to create an application secret.<br>
70
+
You can also learn how to access your FHIR server using Postman.
70
71
71
72
>[!div class="nextstepaction"]
72
73
>[Access the FHIR service using Postman](./../fhir/use-postman.md)
73
74
74
-
FHIR® is a registered trademark of [HL7](https://hl7.org/fhir/) and is used with the permission of HL7.
In this article, you'll learn how to register a public application in Microsoft Entra ID.
16
+
In this article, you learn how to register a public application in Microsoft Entra ID.
17
17
18
18
Client application registrations are Microsoft Entra representations of applications that can authenticate and ask for API permissions on behalf of a user. Public clients are applications such as mobile applications and single page JavaScript applications that can't keep secrets confidential. The procedure is similar to [registering a confidential client](register-confidential-azure-ad-client-app.md), but since public clients can't be trusted to hold an application secret, there's no need to add one.
19
19
20
-
The quickstart provides general information about how to [register an application with the Microsoft identity platform](../../active-directory/develop/quickstart-register-app.md).
20
+
This quickstart provides general information about how to [register an application with the Microsoft identity platform](../../active-directory/develop/quickstart-register-app.md).
21
21
22
22
## App registrations in Azure portal
23
23
@@ -33,7 +33,7 @@ The quickstart provides general information about how to [register an applicatio
33
33
34
34
1. Give the application a display name.
35
35
36
-
2. Provide a reply URL. The reply URL is where authentication codes will be returned to the client application. You can add more reply URLs and edit existing ones later.
36
+
2. Provide a reply URL. The reply URL is where authentication codes are returned to the client application. You can add more reply URLs and edit existing ones later.
37
37
38
38
39
39
@@ -51,21 +51,21 @@ To configure your [desktop](../../active-directory/develop/scenario-desktop-app-
51
51
52
52
## API permissions
53
53
54
-
Permissions for Azure API for FHIR are managed through RBAC. For more details, visit [Configure Azure RBAC for FHIR](configure-azure-rbac.md).
54
+
Permissions for Azure API for FHIR are managed through role-based access control (RBAC). For more details, visit [Configure Azure RBAC for FHIR](configure-azure-rbac.md).
55
55
56
56
>[!NOTE]
57
-
>Use grant_type of client_credentials when trying to otain an access token for Azure API for FHIR using tools such as Postman. For more details, visit [Testing the FHIR API on Azure API for FHIR](tutorial-web-app-test-postman.md).
57
+
>Use a `grant_type` of `client_credentials` when trying to obtain an access token for Azure API for FHIR using tools such as Postman. For more details, visit [Testing the FHIR API on Azure API for FHIR](tutorial-web-app-test-postman.md).
58
58
59
59
## Validate FHIR server authority
60
-
If the application you registered in this article and your FHIR server are in the same Microsoft Entra tenant, you're good to proceed to the next steps.
60
+
If the application you registered and your FHIR server are in the same Microsoft Entra tenant, you're good to proceed to the next steps.
61
61
62
-
If you configure your client application in a different Microsoft Entra tenant from your FHIR server, you'll need to update the **Authority**. In Azure API for FHIR, you do set the Authority under Settings --> Authentication. Set your Authority to ``https://login.microsoftonline.com/\<TENANT-ID>`.
62
+
If you configure your client application in a different Microsoft Entra tenant from your FHIR server, you need to update the **Authority**. In Azure API for FHIR, you do set the Authority under **Settings** > **Authentication**. Set your Authority to `https://login.microsoftonline.com/\<TENANT-ID>`.
63
63
64
64
## Next steps
65
65
66
-
In this article, you've learned how to register a public client application in Microsoft Entra ID. Next, test access to your FHIR Server using Postman.
66
+
In this article, you learned how to register a public client application in Microsoft Entra ID. Next, test access to your FHIR Server using Postman.
67
67
68
68
>[!div class="nextstepaction"]
69
69
>[Access the FHIR service using Postman](./../fhir/use-postman.md)
70
70
71
-
FHIR® is a registered trademark of [HL7](https://hl7.org/fhir/) and is used with the permission of HL7.
In this article, you'll learn how to register a resource (or API) application in Microsoft Entra ID. A resource application is a Microsoft Entra representation of the FHIR server API itself and client applications can request access to the resource when authenticating. The resource application is also known as the *audience* in OAuth parlance.
18
+
In this article, you learn how to register a resource (or API) application in Microsoft Entra ID. A resource application is a Microsoft Entra representation of the FHIR® server API itself, and client applications can request access to the resource when authenticating. The resource application is also known as the *audience* in OAuth parlance.
19
19
20
20
## Azure API for FHIR
21
21
22
22
If you're using the Azure API for FHIR, a resource application is automatically created when you deploy the service. As long as you're using the Azure API for FHIR in the same Microsoft Entra tenant as you're deploying your application, you can skip this how-to-guide and instead deploy your Azure API for FHIR to get started.
23
23
24
-
If you're using a different Microsoft Entra tenant (not associated with your subscription), you can import the Azure API for FHIR resource application into your tenant with
25
-
PowerShell:
24
+
If you're using a different Microsoft Entra tenant (not associated with your subscription), you can use PowerShell to import the Azure API for FHIR resource application into your tenant.
In this article, you'll learn how to register a service client application in Microsoft Entra ID. Client application registrations are Microsoft Entra representations of applications that can be used to authenticate and obtain tokens. A service client is intended to be used by an application to obtain an access token without interactive authentication of a user. It will have certain application permissions and use an application secret (password) when obtaining access tokens.
16
+
In this article, you learn how to register a service client application in Microsoft Entra ID. Client application registrations are Microsoft Entra representations of applications that can be used to authenticate and obtain tokens. A service client is intended to be used by an application to obtain an access token without interactive authentication of a user. It has certain application permissions and can use an application secret (password) when obtaining access tokens.
17
17
18
18
Follow these steps to create a new service client.
19
19
@@ -35,10 +35,10 @@ Follow these steps to create a new service client.
35
35
36
36
## API permissions
37
37
38
-
Permissions for Azure API for FHIR are managed through RBAC. For more details, visit [Configure Azure RBAC for FHIR](configure-azure-rbac.md).
38
+
Permissions for Azure API for FHIR are managed through role-based access control (RBAC). For more details, visit [Configure Azure RBAC for FHIR](configure-azure-rbac.md).
39
39
40
40
>[!NOTE]
41
-
>Use grant_type of client_credentials when trying to otain an access token for Azure API for FHIR using tools such as Postman. For more details, visit [Testing the FHIR API on Azure API for FHIR](tutorial-web-app-test-postman.md).
41
+
>Use a `grant_type` of `client_credentials` when trying to otain an access token for Azure API for FHIR using tools such as Postman. For more details, visit [Testing the FHIR API on Azure API for FHIR](tutorial-web-app-test-postman.md).
42
42
43
43
## Application secret
44
44
@@ -51,13 +51,13 @@ The service client needs a secret (password) to obtain a token.
51
51
52
52
3. Provide a description and duration of the secret (either one year, two years or never).
53
53
54
-
4. Once the secret has been generated, it will only be displayed once in the portal. Make a note of it and store in a secure location.
54
+
4. Once the secret is generated, it will only be displayed once in the portal. Make a note of it and store it in a secure location.
55
55
56
56
## Next steps
57
57
58
-
In this article, you've learned how to register a service client application in Microsoft Entra ID. Next, test access to your FHIR server using Postman.
58
+
In this article, you learned how to register a service client application in Microsoft Entra ID. Next, test access to your FHIR server using Postman.
59
59
60
60
>[!div class="nextstepaction"]
61
61
>[Access the FHIR service using Postman](./../fhir/use-postman.md)
62
62
63
-
FHIR® is a registered trademark of [HL7](https://hl7.org/fhir/) and is used with the permission of HL7.
![prmerger-automator[bot]](https://avatars.githubusercontent.com/u/22479449?v=4&size=40){kind=avatar}
0 commit comments