Search code examples
azureazure-active-directory

Azure App registration does not appear in Enterprise applications

Recently I have created a few app registrations as per screenshot below,

enter image description here

The most interesting thing is that only one of these (webappoidc) appears under Enterprise applications blade like following screenshot shows

enter image description here

So why does Azure behaves this way and how to make my app registrations appear inside Enterprise apps?

Solution

  • When you create an app registration through Azure Portal, the app has Users.Read permission however when you create the same using az ad app create --display-name "MembersApiApp", you will notice that the app registration does not have any permissions.

    Based on the documentation, an Enterprise App is automatically created when an application is given permission to access resources in a tenant (upon registration or consent).

    enter image description here

    Considering you created app registrations without permissions, they will not show up in Enterprise Apps.

    I thought that giving permissions to an app registration created using Azure CLI will automatically add it to Enterprise Apps but that didn't happen. I believe a user has to consent to such applications for them to show under Enterprise apps.

    UPDATE

    Based on my limited research, even if you create an app registration with permissions a Service Principal is not created automatically when using CLI. You would need to explicitly create a Service Principal using az ad sp create.