Forum Discussion

Sagar_Lad's avatar
Sagar_Lad
Brass Contributor
May 29, 2020

What is the different between service principal in App Registration and enterprise application ?

Hi Team,

 

I would like to know more about the service principal in Azure AD.

When we create a service principal in Azure AD,It creates two resources :

 

1) Service Principal in App Registration

2) Service Principal in Enterprise Application

 

Application Id for both is same but object Ids are different ?

 

How to retrieve these object Ids via powershell?

Access Management
Azure Active Directory (AAD)
Identity Management
  • VasilMichev's avatar
    VasilMichev
    MVP
    May 29, 2020

    One is the actual application object, where you configure the properties of your app (authentication, permissions, replyURIs and so on). The other one is a representation of the application within a directory, this can be your own directory or another company directory, etc. It "inherits" the settings from the application object and is what's used to grant consent/permissions to resources.

    • Sagar_Lad's avatar
      Sagar_Lad
      Brass Contributor
      May 30, 2020

      Hi VasilMichev ,

       

      Thanks for the explanation.

      Can you elaborate a bit more one when to use application object id and when to use service principal object id?

       

      Thank You

      • Thijs Lecomte's avatar
        Thijs Lecomte
        Bronze Contributor
        Jun 01, 2020
        A very easy explanation (that isn't 100% correct) is that you create a app registration for apps that you develop yourself.
        Enterprise Applications are added when you add third party appliations.

        As Vasil said, if you would provide us with more insights, we could provide a better answer

Resources