Entra Apps

Glossary and learn more

Short definitions of the words used on this site, plus where to read more.

Glossary

Access token
A token that lets an app call a service for a limited time.
App registration
The definition of an application in Entra, including its IDs, redirect addresses and credentials.
Application permission
A permission that lets an app act as itself with no user present; needs admin approval.
Client ID
The unique identifier of an app, also called the application ID.
Client secret
A password-like credential an app uses to prove its identity; it expires and should be rotated.
Conditional Access
Rules in Entra that decide when and how sign-in is allowed.
Consent
Agreeing to let an app use the permissions it asks for.
Delegated permission
A permission that lets an app act on behalf of a signed-in user.
Enterprise application
The instance of an app in a specific tenant, also called a service principal.
Least privilege
Giving only the permissions that are really needed.
Managed identity
An identity Azure manages for a service, so no secret has to be stored.
Microsoft Entra ID
Microsoft's cloud identity and access service, formerly Azure Active Directory.
Redirect URI
The address Entra sends the user back to after sign-in.
Scope
A named permission an app can request, such as reading a user profile.
Service principal
The identity an app uses inside a tenant.
Single sign-on
Signing in once to reach many apps.
Tenant
An organisation's dedicated instance of Microsoft Entra, identified by a tenant ID.
Token
A small signed piece of data that proves identity or access, valid for a limited time.

Learn more

For authoritative and current details, search for these on Microsoft Learn (learn.microsoft.com):