Azure Authentication - Application (Client Id) - Service Principal

About

The app creates a central identity to authenticate and access Azure Resource.

It holds information like:

• OAuth Client ID,
• Reply URLs,
• and credentials

Articles Related

Management

Setting

Azure Active Directory > User settings > App registrations setting.

If set to:

• Yes, non-admin users can register AD apps. This setting means any user in the Azure AD tenant can register an app.
• No, only global administrators can register apps.

Creation

Native

• Azure Active Directory > App registration > + new Registrations
• Fill the name, the native type + an URL (http://localhost)

Get Identity

• application ID (ie client id). Azure Active Directory > App Registration > Application Id
• and authentication key - Azure Active Directory > App Registration (Preview) > Certificates and Secrets

Others:

• tenant_id, see Azure - Tenant
• subscription id, see Azure - Subscription

doc

Role

To access resources in your subscription, you must assign the application to a role.

Go to your resource group and add permission (IAM)

Documentation / Reference

• https://docs.microsoft.com/en-us/azure/active-directory/develop/howto-create-service-principal-portal