Azure AD App Registration in Plain English (Exam Prep FAQs)

App registration in Azure Active Directory is a frequent source of questions from Azure admins and those preparing for Microsoft certification exams. In this video, we'll walk through configuration of an app registration in Azure AD, explaining key concepts clearly and concisely along the way.

[richardwaldron]

Finally, someone who can explain this clearly so it makes sense to me. Many thanks for posting

[Southpaw]

i was struggling to understand app registration and concepts and found this tremendously helpful. Amazing LinkedIn AZ500 class too. Thank you Pete keep up the great work!

[TenMinuteKQL]

Great Azure content in easy to understand terms, keep it coming!

[ksks]

Thanks Pete for clarifying this topic in simple words. Really helpful for me.

[rahulch]

amazing explanation.. loved it, thank you.

[javier]

Thank you for your video. IT was very helpful and informative

[pluralcloud]

Great content- would like more on just the selection of "Web - redirect url" in Register an Application. Could you continue with the series and also add some diagrams relating to the various choices and scenarios? Like SasS, where would you obtain the guid and use it in an application to have permissions to the user's resources, which the identity management allows permission to access. Thank you.

[terencengwork]

Excellent video. If I have several users that want to programatically interact with files stored in (different) sharepoint sites via Graph API (with Python). Do I create multiple Apps and use application permissions and limit the scope to Sites.Selected for each? Or do I create one App Registration for all users/sites and use delegated permissions? One App w/delegated permissions is more manageable from an admin perspective, but on the user end, they have to get and enter an access token which means there's some interaction and more steps involved.

[ainigma]

Thank you for your video. Assume that we have an application (BE and FE) which is deployed via azure DevOps. What will happens if the app registration secret expires? Do we have to do something or we just renew the secret of app registration? After we renew the secret do we have to update something else? Thank you in advance

[nickromanek]

Best explanation I found so far, I'm looking into converting a LOB app hosted in Azure to use SSO with AAD. Ideally, we'd allow external users to continue using the authentication in place for the website (has it's own database and send code for MFA), but if it detects that an internal employee is logging in, we want it to detect that using the domain and then trigger the SSO process using AAD.

Hopefully my explanation is clear enough, but do you know if that's possible? Any other resources you could point me to for this?

[bhushan]

awesome video!!! thanks for that.
Quick question - is service principal similar to the service account in other cloud services? i believe service account is the account with which our production jobs run instead of running with our own accounts.

[DelMadman]

Amazing explanation! Is not clear for me what the difference between the service principal and managed service identity? It seems like they solve the same problems, allow a user or an app securely access other resources in azure, but what the difference? what is the key difference that make me choose one or another? please explain

[emiliakullutwe]

Hi, I'm an intern and I was asked to integrate one of the company apps that is on Oracle APEX new version with active directory, how can I register an app from oracle apex in azure AD? Please help!

[rock_]

Thanks for the video, I am looking bring the Azure AD to my app (react+ springBoot), but not sure what will be best suited for me (Azure Ad B2C, Azure ad B2B etc), as my app has the functionality to register new user (name, email address(any domain email address) and password) and login. advise or pointer on this please?

[princemathew]

which subscription we need, office 365 subscription or Azure Subscription for App Registeration?

[dsfarag]

I feel so stupid for not knowing that an enterprise app object is created when configuring an app reg. Doh!