entra-app-registration

SKILL.md

Microsoft Entra ID app registration, OAuth 2.0 configuration, and MSAL integration for secure application authentication.

Covers app registration setup, authentication configuration, API permissions, and client credential management across web apps, SPAs, mobile apps, and daemon services

Includes step-by-step workflows for first-time registration, console application authentication, and service-to-service credential flows

Provides Azure CLI commands, MSAL library examples for .NET, JavaScript, Python, and Java, plus security best practices for secret rotation and token validation

Distinguishes scope clearly: handles identity and authentication setup but excludes Azure RBAC, Key Vault secrets management, and resource security

Overview

Microsoft Entra ID (formerly Azure Active Directory) is Microsoft's cloud-based identity and access management service. App registrations allow applications to authenticate users and access Azure resources securely.

Key Concepts

Concept
Description

App Registration
Configuration that allows an app to use Microsoft identity platform

Application (Client) ID
Unique identifier for your application

Tenant ID
Unique identifier for your Azure AD tenant/directory

Client Secret
Password for the application (confidential clients only)

Redirect URI
URL where authentication responses are sent

API Permissions
Access scopes your app requests

Service Principal
Identity created in your tenant when you register an app

Application Types