You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
National clouds are physically isolated instances of Azure. These regions of Azure are designed to make sure that data residency, sovereignty, and compliance requirements are honored within geographical boundaries.
26
26
27
-
Including global cloud, Azure Active Directory is deployed in the following National clouds:
27
+
Including the global cloud, Azure Active Directory (Azure AD) is deployed in the following national clouds:
28
28
29
-
- Azure US Government
29
+
- Azure Government
30
30
- Azure Germany
31
31
- Azure China 21Vianet
32
32
33
-
National clouds are unique and different environment than Azure global. Therefore, it is important to be aware of some key differences while developing your application for these environments such as registering applications, acquiring tokens, and configuring endpoints.
33
+
National clouds are unique and a separate environment from Azure global. It's important to be aware of key differences while developing your application for these environments. Differences include registering applications, acquiring tokens, and configuring endpoints.
34
34
35
35
## App registration endpoints
36
36
37
-
There's a separate Azure portal for each one of the national clouds. To integrate applications with the Microsoft Identity Platform in a national cloud, you are required to register your application separately in each of the Azure portal specific to the environment.
37
+
There's a separate Azure portal for each one of the national clouds. To integrate applications with the Microsoft identity platform in a national cloud, you're required to register your application separately in each Azure portal that's specific to the environment.
38
38
39
-
The following table lists the base URLs for the Azure Active Directory (Azure AD) endpoints used to register an application for each national cloud.
39
+
The following table lists the base URLs for the Azure AD endpoints used to register an application for each national cloud.
40
40
41
41
| National cloud | Azure AD portal endpoint |
42
42
|----------------|--------------------------|
@@ -49,33 +49,33 @@ The following table lists the base URLs for the Azure Active Directory (Azure AD
49
49
50
50
All the national clouds authenticate users separately in each environment and have separate authentication endpoints.
51
51
52
-
The following table lists the base URLs for the Azure Active Directory (Azure AD) endpoints used to acquire tokens for each national cloud.
52
+
The following table lists the base URLs for the Azure AD endpoints used to acquire tokens for each national cloud.
53
53
54
-
| National cloud | Azure AD auth endpoint |
54
+
| National cloud | Azure AD authentication endpoint |
55
55
|----------------|-------------------------|
56
56
| Azure AD for US Government |`https://login.microsoftonline.us`|
57
57
| Azure AD Germany|`https://login.microsoftonline.de`|
58
58
| Azure AD China operated by 21Vianet |`https://login.chinacloudapi.cn`|
59
59
| Azure AD (global service)|`https://login.microsoftonline.com`|
60
60
61
-
- Requests to the Azure AD authorization or token endpoints can be formed using the appropriate region-specific base URL. For example, for Azure Germany:
61
+
You can form requests to the Azure AD authorization or token endpoints by using the appropriate region-specific base URL. For example, for Azure Germany:
62
62
63
63
- Authorization common endpoint is `https://login.microsoftonline.de/common/oauth2/authorize`.
64
64
- Token common endpoint is `https://login.microsoftonline.de/common/oauth2/token`.
65
65
66
-
-For single-tenant applications, replace common in the previous URLs with your tenant ID or name, for example,`https://login.microsoftonline.de/contoso.com`.
66
+
For single-tenant applications, replace "common" in the previous URLs with your tenant ID or name. An example is`https://login.microsoftonline.de/contoso.com`.
67
67
68
68
> [!NOTE]
69
-
> The [Azure AD v2.0 authorization](https://docs.microsoft.com/azure/active-directory/develop/active-directory-appmodel-v2-overview) and token endpoints are only available for the global service. It is not yet supported for national cloud deployments.
69
+
> The [Azure AD v2.0 authorization](https://docs.microsoft.com/azure/active-directory/develop/active-directory-appmodel-v2-overview) and token endpoints are available only for the global service. They're not supported for national cloud deployments.
70
70
71
71
## Microsoft Graph API
72
72
73
-
To learn how to call the Microsoft Graph APIs in National Cloud environment go to [Microsoft Graph in national cloud](https://developer.microsoft.com/graph/docs/concepts/deployments).
73
+
To learn how to call the Microsoft Graph APIs in a national cloud environment, go to [Microsoft Graph in national cloud deployments](https://developer.microsoft.com/graph/docs/concepts/deployments).
74
74
75
75
> [!IMPORTANT]
76
-
> Certain services and features that are in specific regions of the global service might not be available in all of the National clouds. To find out what services are available go to [products available by region](https://azure.microsoft.com/global-infrastructure/services/?products=all®ions=usgov-non-regional,us-dod-central,us-dod-east,usgov-arizona,usgov-iowa,usgov-texas,usgov-virginia,china-non-regional,china-east,china-east-2,china-north,china-north-2,germany-non-regional,germany-central,germany-northeast).
76
+
> Certain services and features that are in specific regions of the global service might not be available in all of the national clouds. To find out what services are available, go to [Products available by region](https://azure.microsoft.com/global-infrastructure/services/?products=all®ions=usgov-non-regional,us-dod-central,us-dod-east,usgov-arizona,usgov-iowa,usgov-texas,usgov-virginia,china-non-regional,china-east,china-east-2,china-north,china-north-2,germany-non-regional,germany-central,germany-northeast).
77
77
78
-
Follow this [Microsoft Authentication Library (MSAL) tutorial](msal-national-cloud.md) to learn how to build an application using Microsoft identity platform. Specifically, this app will sign in a user, get an access token to call the Microsoft Graph API.
78
+
To learn how to build an application by using the Microsoft identity platform, follow the [Microsoft Authentication Library (MSAL) tutorial](msal-national-cloud.md). Specifically, this app will sign in a user and get an access token to call the Microsoft Graph API.
0 commit comments