Entra ID app registrations and enterprise apps

4slides. Screenshot a slide, download it as a PNG, or use your browser's Print → Save as PDF for a LinkedIn-ready multi-page carousel — each slide becomes one page.

solvingmicrosoft365.com

1 / 4

Entra ID app registrations and enterprise apps

Two sides of the same coin — app registrations define an app, enterprise apps grant it to your tenant. Here's how they relate.

Solving Microsoft 365 · www.solvingmicrosoft365.com/guides/entra-id-app-registrations-and-enterprise-apps

Slide 1Download PNG

solvingmicrosoft365.com

2 / 4

What is the difference between an app registration and an enterprise application?

An app registration is the definition of an application — its identity, redirect URIs, credentials, and the permissions it asks for — created in the tenant that owns the app. An enterprise application (service principal…

Solving Microsoft 365 · www.solvingmicrosoft365.com/guides/entra-id-app-registrations-and-enterprise-apps

Slide 2Download PNG

solvingmicrosoft365.com

3 / 4

Who can consent to application permissions?

Users can consent to low-impact delegated permissions if the tenant's consent policy allows it; application permissions and high-impact delegated permissions need admin consent from a Global Administrator, Privileged Ro…

Solving Microsoft 365 · www.solvingmicrosoft365.com/guides/entra-id-app-registrations-and-enterprise-apps

Slide 3Download PNG

solvingmicrosoft365.com

4 / 4

Should I use a client secret or a certificate?

A certificate. Secrets are strings that end up in scripts and chat; certificates can be stored in a key vault or hardware and cannot be pasted. For workloads in Azure, a managed identity removes the credential entirely.

Solving Microsoft 365 · www.solvingmicrosoft365.com/guides/entra-id-app-registrations-and-enterprise-apps

Slide 4Download PNG

Auto-generated from Entra ID app registrations and enterprise apps. This page is not indexed and isn't part of the guide itself.