Question

Difficulty: EasyApp Registrations and Service Principals

You register a new application in Microsoft Entra ID to integrate authentication into a custom web app. Which object is created in your home tenant to serve as the global configuration and blueprint for the application across all tenants?

  1. Application objectAnswer
  2. B
    Service principal
  3. C
    System-assigned managed identity
  4. D
    User-assigned managed identity

Answer

The application object is the global configuration and template representing the registered application.
The application object represents the global configuration of the registered application and acts as the template from which its local service principal representations are generated.

Step-by-Step Solution

1
Analyze the requirements for the object
The target object must represent the global configuration and act as a template/blueprint for all tenants.
Microsoft Entra ID separates the global definition of an application from its local instantiations.
2
Differentiate between Application Objects and Service Principals
An application registration creates an Application Object (global template) in the home tenant. A Service Principal represents the local instance of that application in a specific tenant.
This differentiation ensures that the application's configuration can exist once globally, while permissions and local settings can be managed per tenant.

Key Concept

Application Object vs. Service Principal
Rate this question