


Registered in a "home" directory) and one or more service principal For any givenĪpplication, it can have at most one application object (which is

Instance of the application in your directory. Service principals are what governĪn application connecting to Azure AD and can be considered the You can manage service principals in the Azure portal through theĮnterprise Applications experience.
#Cannot move in principle app how to
To Azure AD and can be considered the definition of the application,Īllowing the service to know how to issue tokens to the application You can manage application objects in the Azure portal through theĪpplication objects describe the application The local representation for use in a specific tenant. The application object is the global representation of yourĪpplication for use across all tenants, and the service principal is

Nitin's answer does a good job of summarizing this but I wanted to add an answer with documentation references. This is, I agree, potentially confusing to a new-to-AAD developer or administrator. Integrating an Enterprise application (G-Suite): Your own applications will also be represented in the Enterprise Applications blade as Service Principals, which are instantiations of your applications in the tenant. For example, if you want to integrate Facebook and manage SSO within your organization, you can integrate it from the Enterprise Applications dropdown in the applications blade. However, the term Enterprise App generally refers to applications published by other companies in the AAD gallery that can be used within your organization. The Enterprise Applications blade might be confused with App Registrations because the Enterprise Application blade contains the list of your service principals. The default settings allow only users from the tenant under which your app is registered to sign into your application. When you register your application, Azure AD assigns a unique Application ID to it and allows you to add certain capabilities such as credentials, permissions, and sign-ons. When you have an application that you are developing and want to integrate with Azure, you need to register your application in App Registrations, where you will configure your reply URL, logout URL, and API access if needed.
#Cannot move in principle app registration
An App Registration is a way of reserving your app and URL with Azure AD, allowing it to communicate with Azure AD, hooking up your reply urls, and enabling AAD services on it.
