Docs Packages
  1. Pulumi Registry
  2. Azure Active Directory (Azure AD)
  3. API Docs
  4. Application
azuread logo
Azure Active Directory (Azure AD) v5.38.0, May 17 23

azuread.Application

Explore with Pulumi AI

Import

Applications can be imported using their object ID, e.g.

 $ pulumi import azuread:index/application:Application test 00000000-0000-0000-0000-000000000000

Example Usage

Create an application

using System;
using System.Collections.Generic;
using System.IO;
using System.Linq;
using Pulumi;
using AzureAD = Pulumi.AzureAD;

	private static string ReadFileBase64(string path) {
		return Convert.ToBase64String(System.Text.Encoding.UTF8.GetBytes(File.ReadAllText(path)));
	}

return await Deployment.RunAsync(() => 
{
    var current = AzureAD.GetClientConfig.Invoke();

    var example = new AzureAD.Application("example", new()
    {
        DisplayName = "example",
        IdentifierUris = new[]
        {
            "api://example-app",
        },
        LogoImage = ReadFileBase64("/path/to/logo.png"),
        Owners = new[]
        {
            current.Apply(getClientConfigResult => getClientConfigResult.ObjectId),
        },
        SignInAudience = "AzureADMultipleOrgs",
        Api = new AzureAD.Inputs.ApplicationApiArgs
        {
            MappedClaimsEnabled = true,
            RequestedAccessTokenVersion = 2,
            KnownClientApplications = new[]
            {
                azuread_application.Known1.Application_id,
                azuread_application.Known2.Application_id,
            },
            Oauth2PermissionScopes = new[]
            {
                new AzureAD.Inputs.ApplicationApiOauth2PermissionScopeArgs
                {
                    AdminConsentDescription = "Allow the application to access example on behalf of the signed-in user.",
                    AdminConsentDisplayName = "Access example",
                    Enabled = true,
                    Id = "96183846-204b-4b43-82e1-5d2222eb4b9b",
                    Type = "User",
                    UserConsentDescription = "Allow the application to access example on your behalf.",
                    UserConsentDisplayName = "Access example",
                    Value = "user_impersonation",
                },
                new AzureAD.Inputs.ApplicationApiOauth2PermissionScopeArgs
                {
                    AdminConsentDescription = "Administer the example application",
                    AdminConsentDisplayName = "Administer",
                    Enabled = true,
                    Id = "be98fa3e-ab5b-4b11-83d9-04ba2b7946bc",
                    Type = "Admin",
                    Value = "administer",
                },
            },
        },
        AppRoles = new[]
        {
            new AzureAD.Inputs.ApplicationAppRoleArgs
            {
                AllowedMemberTypes = new[]
                {
                    "User",
                    "Application",
                },
                Description = "Admins can manage roles and perform all task actions",
                DisplayName = "Admin",
                Enabled = true,
                Id = "1b19509b-32b1-4e9f-b71d-4992aa991967",
                Value = "admin",
            },
            new AzureAD.Inputs.ApplicationAppRoleArgs
            {
                AllowedMemberTypes = new[]
                {
                    "User",
                },
                Description = "ReadOnly roles have limited query access",
                DisplayName = "ReadOnly",
                Enabled = true,
                Id = "497406e4-012a-4267-bf18-45a1cb148a01",
                Value = "User",
            },
        },
        FeatureTags = new[]
        {
            new AzureAD.Inputs.ApplicationFeatureTagArgs
            {
                Enterprise = true,
                Gallery = true,
            },
        },
        OptionalClaims = new AzureAD.Inputs.ApplicationOptionalClaimsArgs
        {
            AccessTokens = new[]
            {
                new AzureAD.Inputs.ApplicationOptionalClaimsAccessTokenArgs
                {
                    Name = "myclaim",
                },
                new AzureAD.Inputs.ApplicationOptionalClaimsAccessTokenArgs
                {
                    Name = "otherclaim",
                },
            },
            IdTokens = new[]
            {
                new AzureAD.Inputs.ApplicationOptionalClaimsIdTokenArgs
                {
                    Name = "userclaim",
                    Source = "user",
                    Essential = true,
                    AdditionalProperties = new[]
                    {
                        "emit_as_roles",
                    },
                },
            },
            Saml2Tokens = new[]
            {
                new AzureAD.Inputs.ApplicationOptionalClaimsSaml2TokenArgs
                {
                    Name = "samlexample",
                },
            },
        },
        RequiredResourceAccesses = new[]
        {
            new AzureAD.Inputs.ApplicationRequiredResourceAccessArgs
            {
                ResourceAppId = "00000003-0000-0000-c000-000000000000",
                ResourceAccesses = new[]
                {
                    new AzureAD.Inputs.ApplicationRequiredResourceAccessResourceAccessArgs
                    {
                        Id = "df021288-bdef-4463-88db-98f22de89214",
                        Type = "Role",
                    },
                    new AzureAD.Inputs.ApplicationRequiredResourceAccessResourceAccessArgs
                    {
                        Id = "b4e74841-8e56-480b-be8b-910348b18b4c",
                        Type = "Scope",
                    },
                },
            },
            new AzureAD.Inputs.ApplicationRequiredResourceAccessArgs
            {
                ResourceAppId = "c5393580-f805-4401-95e8-94b7a6ef2fc2",
                ResourceAccesses = new[]
                {
                    new AzureAD.Inputs.ApplicationRequiredResourceAccessResourceAccessArgs
                    {
                        Id = "594c1fb6-4f81-4475-ae41-0c394909246c",
                        Type = "Role",
                    },
                },
            },
        },
        Web = new AzureAD.Inputs.ApplicationWebArgs
        {
            HomepageUrl = "https://app.example.net",
            LogoutUrl = "https://app.example.net/logout",
            RedirectUris = new[]
            {
                "https://app.example.net/account",
            },
            ImplicitGrant = new AzureAD.Inputs.ApplicationWebImplicitGrantArgs
            {
                AccessTokenIssuanceEnabled = true,
                IdTokenIssuanceEnabled = true,
            },
        },
    });

});

package main

import (
	"encoding/base64"
	"os"

	"github.com/pulumi/pulumi-azuread/sdk/v5/go/azuread"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func filebase64OrPanic(path string) pulumi.StringPtrInput {
	if fileData, err := os.ReadFile(path); err == nil {
		return pulumi.String(base64.StdEncoding.EncodeToString(fileData[:]))
	} else {
		panic(err.Error())
	}
}

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		current, err := azuread.GetClientConfig(ctx, nil, nil)
		if err != nil {
			return err
		}
		_, err = azuread.NewApplication(ctx, "example", &azuread.ApplicationArgs{
			DisplayName: pulumi.String("example"),
			IdentifierUris: pulumi.StringArray{
				pulumi.String("api://example-app"),
			},
			LogoImage: filebase64OrPanic("/path/to/logo.png"),
			Owners: pulumi.StringArray{
				*pulumi.String(current.ObjectId),
			},
			SignInAudience: pulumi.String("AzureADMultipleOrgs"),
			Api: &azuread.ApplicationApiArgs{
				MappedClaimsEnabled:         pulumi.Bool(true),
				RequestedAccessTokenVersion: pulumi.Int(2),
				KnownClientApplications: pulumi.StringArray{
					azuread_application.Known1.Application_id,
					azuread_application.Known2.Application_id,
				},
				Oauth2PermissionScopes: azuread.ApplicationApiOauth2PermissionScopeArray{
					&azuread.ApplicationApiOauth2PermissionScopeArgs{
						AdminConsentDescription: pulumi.String("Allow the application to access example on behalf of the signed-in user."),
						AdminConsentDisplayName: pulumi.String("Access example"),
						Enabled:                 pulumi.Bool(true),
						Id:                      pulumi.String("96183846-204b-4b43-82e1-5d2222eb4b9b"),
						Type:                    pulumi.String("User"),
						UserConsentDescription:  pulumi.String("Allow the application to access example on your behalf."),
						UserConsentDisplayName:  pulumi.String("Access example"),
						Value:                   pulumi.String("user_impersonation"),
					},
					&azuread.ApplicationApiOauth2PermissionScopeArgs{
						AdminConsentDescription: pulumi.String("Administer the example application"),
						AdminConsentDisplayName: pulumi.String("Administer"),
						Enabled:                 pulumi.Bool(true),
						Id:                      pulumi.String("be98fa3e-ab5b-4b11-83d9-04ba2b7946bc"),
						Type:                    pulumi.String("Admin"),
						Value:                   pulumi.String("administer"),
					},
				},
			},
			AppRoles: azuread.ApplicationAppRoleArray{
				&azuread.ApplicationAppRoleArgs{
					AllowedMemberTypes: pulumi.StringArray{
						pulumi.String("User"),
						pulumi.String("Application"),
					},
					Description: pulumi.String("Admins can manage roles and perform all task actions"),
					DisplayName: pulumi.String("Admin"),
					Enabled:     pulumi.Bool(true),
					Id:          pulumi.String("1b19509b-32b1-4e9f-b71d-4992aa991967"),
					Value:       pulumi.String("admin"),
				},
				&azuread.ApplicationAppRoleArgs{
					AllowedMemberTypes: pulumi.StringArray{
						pulumi.String("User"),
					},
					Description: pulumi.String("ReadOnly roles have limited query access"),
					DisplayName: pulumi.String("ReadOnly"),
					Enabled:     pulumi.Bool(true),
					Id:          pulumi.String("497406e4-012a-4267-bf18-45a1cb148a01"),
					Value:       pulumi.String("User"),
				},
			},
			FeatureTags: azuread.ApplicationFeatureTagArray{
				&azuread.ApplicationFeatureTagArgs{
					Enterprise: pulumi.Bool(true),
					Gallery:    pulumi.Bool(true),
				},
			},
			OptionalClaims: &azuread.ApplicationOptionalClaimsArgs{
				AccessTokens: azuread.ApplicationOptionalClaimsAccessTokenArray{
					&azuread.ApplicationOptionalClaimsAccessTokenArgs{
						Name: pulumi.String("myclaim"),
					},
					&azuread.ApplicationOptionalClaimsAccessTokenArgs{
						Name: pulumi.String("otherclaim"),
					},
				},
				IdTokens: azuread.ApplicationOptionalClaimsIdTokenArray{
					&azuread.ApplicationOptionalClaimsIdTokenArgs{
						Name:      pulumi.String("userclaim"),
						Source:    pulumi.String("user"),
						Essential: pulumi.Bool(true),
						AdditionalProperties: pulumi.StringArray{
							pulumi.String("emit_as_roles"),
						},
					},
				},
				Saml2Tokens: azuread.ApplicationOptionalClaimsSaml2TokenArray{
					&azuread.ApplicationOptionalClaimsSaml2TokenArgs{
						Name: pulumi.String("samlexample"),
					},
				},
			},
			RequiredResourceAccesses: azuread.ApplicationRequiredResourceAccessArray{
				&azuread.ApplicationRequiredResourceAccessArgs{
					ResourceAppId: pulumi.String("00000003-0000-0000-c000-000000000000"),
					ResourceAccesses: azuread.ApplicationRequiredResourceAccessResourceAccessArray{
						&azuread.ApplicationRequiredResourceAccessResourceAccessArgs{
							Id:   pulumi.String("df021288-bdef-4463-88db-98f22de89214"),
							Type: pulumi.String("Role"),
						},
						&azuread.ApplicationRequiredResourceAccessResourceAccessArgs{
							Id:   pulumi.String("b4e74841-8e56-480b-be8b-910348b18b4c"),
							Type: pulumi.String("Scope"),
						},
					},
				},
				&azuread.ApplicationRequiredResourceAccessArgs{
					ResourceAppId: pulumi.String("c5393580-f805-4401-95e8-94b7a6ef2fc2"),
					ResourceAccesses: azuread.ApplicationRequiredResourceAccessResourceAccessArray{
						&azuread.ApplicationRequiredResourceAccessResourceAccessArgs{
							Id:   pulumi.String("594c1fb6-4f81-4475-ae41-0c394909246c"),
							Type: pulumi.String("Role"),
						},
					},
				},
			},
			Web: &azuread.ApplicationWebArgs{
				HomepageUrl: pulumi.String("https://app.example.net"),
				LogoutUrl:   pulumi.String("https://app.example.net/logout"),
				RedirectUris: pulumi.StringArray{
					pulumi.String("https://app.example.net/account"),
				},
				ImplicitGrant: &azuread.ApplicationWebImplicitGrantArgs{
					AccessTokenIssuanceEnabled: pulumi.Bool(true),
					IdTokenIssuanceEnabled:     pulumi.Bool(true),
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azuread.AzureadFunctions;
import com.pulumi.azuread.Application;
import com.pulumi.azuread.ApplicationArgs;
import com.pulumi.azuread.inputs.ApplicationApiArgs;
import com.pulumi.azuread.inputs.ApplicationAppRoleArgs;
import com.pulumi.azuread.inputs.ApplicationFeatureTagArgs;
import com.pulumi.azuread.inputs.ApplicationOptionalClaimsArgs;
import com.pulumi.azuread.inputs.ApplicationRequiredResourceAccessArgs;
import com.pulumi.azuread.inputs.ApplicationWebArgs;
import com.pulumi.azuread.inputs.ApplicationWebImplicitGrantArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        final var current = AzureadFunctions.getClientConfig();

        var example = new Application("example", ApplicationArgs.builder()        
            .displayName("example")
            .identifierUris("api://example-app")
            .logoImage(Base64.getEncoder().encodeToString(Files.readAllBytes(Paths.get("/path/to/logo.png"))))
            .owners(current.applyValue(getClientConfigResult -> getClientConfigResult.objectId()))
            .signInAudience("AzureADMultipleOrgs")
            .api(ApplicationApiArgs.builder()
                .mappedClaimsEnabled(true)
                .requestedAccessTokenVersion(2)
                .knownClientApplications(                
                    azuread_application.known1().application_id(),
                    azuread_application.known2().application_id())
                .oauth2PermissionScopes(                
                    ApplicationApiOauth2PermissionScopeArgs.builder()
                        .adminConsentDescription("Allow the application to access example on behalf of the signed-in user.")
                        .adminConsentDisplayName("Access example")
                        .enabled(true)
                        .id("96183846-204b-4b43-82e1-5d2222eb4b9b")
                        .type("User")
                        .userConsentDescription("Allow the application to access example on your behalf.")
                        .userConsentDisplayName("Access example")
                        .value("user_impersonation")
                        .build(),
                    ApplicationApiOauth2PermissionScopeArgs.builder()
                        .adminConsentDescription("Administer the example application")
                        .adminConsentDisplayName("Administer")
                        .enabled(true)
                        .id("be98fa3e-ab5b-4b11-83d9-04ba2b7946bc")
                        .type("Admin")
                        .value("administer")
                        .build())
                .build())
            .appRoles(            
                ApplicationAppRoleArgs.builder()
                    .allowedMemberTypes(                    
                        "User",
                        "Application")
                    .description("Admins can manage roles and perform all task actions")
                    .displayName("Admin")
                    .enabled(true)
                    .id("1b19509b-32b1-4e9f-b71d-4992aa991967")
                    .value("admin")
                    .build(),
                ApplicationAppRoleArgs.builder()
                    .allowedMemberTypes("User")
                    .description("ReadOnly roles have limited query access")
                    .displayName("ReadOnly")
                    .enabled(true)
                    .id("497406e4-012a-4267-bf18-45a1cb148a01")
                    .value("User")
                    .build())
            .featureTags(ApplicationFeatureTagArgs.builder()
                .enterprise(true)
                .gallery(true)
                .build())
            .optionalClaims(ApplicationOptionalClaimsArgs.builder()
                .accessTokens(                
                    ApplicationOptionalClaimsAccessTokenArgs.builder()
                        .name("myclaim")
                        .build(),
                    ApplicationOptionalClaimsAccessTokenArgs.builder()
                        .name("otherclaim")
                        .build())
                .idTokens(ApplicationOptionalClaimsIdTokenArgs.builder()
                    .name("userclaim")
                    .source("user")
                    .essential(true)
                    .additionalProperties("emit_as_roles")
                    .build())
                .saml2Tokens(ApplicationOptionalClaimsSaml2TokenArgs.builder()
                    .name("samlexample")
                    .build())
                .build())
            .requiredResourceAccesses(            
                ApplicationRequiredResourceAccessArgs.builder()
                    .resourceAppId("00000003-0000-0000-c000-000000000000")
                    .resourceAccesses(                    
                        ApplicationRequiredResourceAccessResourceAccessArgs.builder()
                            .id("df021288-bdef-4463-88db-98f22de89214")
                            .type("Role")
                            .build(),
                        ApplicationRequiredResourceAccessResourceAccessArgs.builder()
                            .id("b4e74841-8e56-480b-be8b-910348b18b4c")
                            .type("Scope")
                            .build())
                    .build(),
                ApplicationRequiredResourceAccessArgs.builder()
                    .resourceAppId("c5393580-f805-4401-95e8-94b7a6ef2fc2")
                    .resourceAccesses(ApplicationRequiredResourceAccessResourceAccessArgs.builder()
                        .id("594c1fb6-4f81-4475-ae41-0c394909246c")
                        .type("Role")
                        .build())
                    .build())
            .web(ApplicationWebArgs.builder()
                .homepageUrl("https://app.example.net")
                .logoutUrl("https://app.example.net/logout")
                .redirectUris("https://app.example.net/account")
                .implicitGrant(ApplicationWebImplicitGrantArgs.builder()
                    .accessTokenIssuanceEnabled(true)
                    .idTokenIssuanceEnabled(true)
                    .build())
                .build())
            .build());

    }
}

import pulumi
import base64
import pulumi_azuread as azuread

current = azuread.get_client_config()
example = azuread.Application("example",
    display_name="example",
    identifier_uris=["api://example-app"],
    logo_image=(lambda path: base64.b64encode(open(path).read().encode()).decode())("/path/to/logo.png"),
    owners=[current.object_id],
    sign_in_audience="AzureADMultipleOrgs",
    api=azuread.ApplicationApiArgs(
        mapped_claims_enabled=True,
        requested_access_token_version=2,
        known_client_applications=[
            azuread_application["known1"]["application_id"],
            azuread_application["known2"]["application_id"],
        ],
        oauth2_permission_scopes=[
            azuread.ApplicationApiOauth2PermissionScopeArgs(
                admin_consent_description="Allow the application to access example on behalf of the signed-in user.",
                admin_consent_display_name="Access example",
                enabled=True,
                id="96183846-204b-4b43-82e1-5d2222eb4b9b",
                type="User",
                user_consent_description="Allow the application to access example on your behalf.",
                user_consent_display_name="Access example",
                value="user_impersonation",
            ),
            azuread.ApplicationApiOauth2PermissionScopeArgs(
                admin_consent_description="Administer the example application",
                admin_consent_display_name="Administer",
                enabled=True,
                id="be98fa3e-ab5b-4b11-83d9-04ba2b7946bc",
                type="Admin",
                value="administer",
            ),
        ],
    ),
    app_roles=[
        azuread.ApplicationAppRoleArgs(
            allowed_member_types=[
                "User",
                "Application",
            ],
            description="Admins can manage roles and perform all task actions",
            display_name="Admin",
            enabled=True,
            id="1b19509b-32b1-4e9f-b71d-4992aa991967",
            value="admin",
        ),
        azuread.ApplicationAppRoleArgs(
            allowed_member_types=["User"],
            description="ReadOnly roles have limited query access",
            display_name="ReadOnly",
            enabled=True,
            id="497406e4-012a-4267-bf18-45a1cb148a01",
            value="User",
        ),
    ],
    feature_tags=[azuread.ApplicationFeatureTagArgs(
        enterprise=True,
        gallery=True,
    )],
    optional_claims=azuread.ApplicationOptionalClaimsArgs(
        access_tokens=[
            azuread.ApplicationOptionalClaimsAccessTokenArgs(
                name="myclaim",
            ),
            azuread.ApplicationOptionalClaimsAccessTokenArgs(
                name="otherclaim",
            ),
        ],
        id_tokens=[azuread.ApplicationOptionalClaimsIdTokenArgs(
            name="userclaim",
            source="user",
            essential=True,
            additional_properties=["emit_as_roles"],
        )],
        saml2_tokens=[azuread.ApplicationOptionalClaimsSaml2TokenArgs(
            name="samlexample",
        )],
    ),
    required_resource_accesses=[
        azuread.ApplicationRequiredResourceAccessArgs(
            resource_app_id="00000003-0000-0000-c000-000000000000",
            resource_accesses=[
                azuread.ApplicationRequiredResourceAccessResourceAccessArgs(
                    id="df021288-bdef-4463-88db-98f22de89214",
                    type="Role",
                ),
                azuread.ApplicationRequiredResourceAccessResourceAccessArgs(
                    id="b4e74841-8e56-480b-be8b-910348b18b4c",
                    type="Scope",
                ),
            ],
        ),
        azuread.ApplicationRequiredResourceAccessArgs(
            resource_app_id="c5393580-f805-4401-95e8-94b7a6ef2fc2",
            resource_accesses=[azuread.ApplicationRequiredResourceAccessResourceAccessArgs(
                id="594c1fb6-4f81-4475-ae41-0c394909246c",
                type="Role",
            )],
        ),
    ],
    web=azuread.ApplicationWebArgs(
        homepage_url="https://app.example.net",
        logout_url="https://app.example.net/logout",
        redirect_uris=["https://app.example.net/account"],
        implicit_grant=azuread.ApplicationWebImplicitGrantArgs(
            access_token_issuance_enabled=True,
            id_token_issuance_enabled=True,
        ),
    ))

import * as pulumi from "@pulumi/pulumi";
import * as azuread from "@pulumi/azuread";
import * as fs from "fs";

const current = azuread.getClientConfig({});
const example = new azuread.Application("example", {
    displayName: "example",
    identifierUris: ["api://example-app"],
    logoImage: Buffer.from(fs.readFileSync("/path/to/logo.png"), 'binary').toString('base64'),
    owners: [current.then(current => current.objectId)],
    signInAudience: "AzureADMultipleOrgs",
    api: {
        mappedClaimsEnabled: true,
        requestedAccessTokenVersion: 2,
        knownClientApplications: [
            azuread_application.known1.application_id,
            azuread_application.known2.application_id,
        ],
        oauth2PermissionScopes: [
            {
                adminConsentDescription: "Allow the application to access example on behalf of the signed-in user.",
                adminConsentDisplayName: "Access example",
                enabled: true,
                id: "96183846-204b-4b43-82e1-5d2222eb4b9b",
                type: "User",
                userConsentDescription: "Allow the application to access example on your behalf.",
                userConsentDisplayName: "Access example",
                value: "user_impersonation",
            },
            {
                adminConsentDescription: "Administer the example application",
                adminConsentDisplayName: "Administer",
                enabled: true,
                id: "be98fa3e-ab5b-4b11-83d9-04ba2b7946bc",
                type: "Admin",
                value: "administer",
            },
        ],
    },
    appRoles: [
        {
            allowedMemberTypes: [
                "User",
                "Application",
            ],
            description: "Admins can manage roles and perform all task actions",
            displayName: "Admin",
            enabled: true,
            id: "1b19509b-32b1-4e9f-b71d-4992aa991967",
            value: "admin",
        },
        {
            allowedMemberTypes: ["User"],
            description: "ReadOnly roles have limited query access",
            displayName: "ReadOnly",
            enabled: true,
            id: "497406e4-012a-4267-bf18-45a1cb148a01",
            value: "User",
        },
    ],
    featureTags: [{
        enterprise: true,
        gallery: true,
    }],
    optionalClaims: {
        accessTokens: [
            {
                name: "myclaim",
            },
            {
                name: "otherclaim",
            },
        ],
        idTokens: [{
            name: "userclaim",
            source: "user",
            essential: true,
            additionalProperties: ["emit_as_roles"],
        }],
        saml2Tokens: [{
            name: "samlexample",
        }],
    },
    requiredResourceAccesses: [
        {
            resourceAppId: "00000003-0000-0000-c000-000000000000",
            resourceAccesses: [
                {
                    id: "df021288-bdef-4463-88db-98f22de89214",
                    type: "Role",
                },
                {
                    id: "b4e74841-8e56-480b-be8b-910348b18b4c",
                    type: "Scope",
                },
            ],
        },
        {
            resourceAppId: "c5393580-f805-4401-95e8-94b7a6ef2fc2",
            resourceAccesses: [{
                id: "594c1fb6-4f81-4475-ae41-0c394909246c",
                type: "Role",
            }],
        },
    ],
    web: {
        homepageUrl: "https://app.example.net",
        logoutUrl: "https://app.example.net/logout",
        redirectUris: ["https://app.example.net/account"],
        implicitGrant: {
            accessTokenIssuanceEnabled: true,
            idTokenIssuanceEnabled: true,
        },
    },
});

Coming soon!

Create application from a gallery template

using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AzureAD = Pulumi.AzureAD;

return await Deployment.RunAsync(() => 
{
    var exampleApplicationTemplate = AzureAD.GetApplicationTemplate.Invoke(new()
    {
        DisplayName = "Marketo",
    });

    var exampleApplication = new AzureAD.Application("exampleApplication", new()
    {
        DisplayName = "example",
        TemplateId = exampleApplicationTemplate.Apply(getApplicationTemplateResult => getApplicationTemplateResult.TemplateId),
    });

    var exampleServicePrincipal = new AzureAD.ServicePrincipal("exampleServicePrincipal", new()
    {
        ApplicationId = exampleApplication.ApplicationId,
        UseExisting = true,
    });

});

package main

import (
	"github.com/pulumi/pulumi-azuread/sdk/v5/go/azuread"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		exampleApplicationTemplate, err := azuread.GetApplicationTemplate(ctx, &azuread.GetApplicationTemplateArgs{
			DisplayName: pulumi.StringRef("Marketo"),
		}, nil)
		if err != nil {
			return err
		}
		exampleApplication, err := azuread.NewApplication(ctx, "exampleApplication", &azuread.ApplicationArgs{
			DisplayName: pulumi.String("example"),
			TemplateId:  *pulumi.String(exampleApplicationTemplate.TemplateId),
		})
		if err != nil {
			return err
		}
		_, err = azuread.NewServicePrincipal(ctx, "exampleServicePrincipal", &azuread.ServicePrincipalArgs{
			ApplicationId: exampleApplication.ApplicationId,
			UseExisting:   pulumi.Bool(true),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azuread.AzureadFunctions;
import com.pulumi.azuread.inputs.GetApplicationTemplateArgs;
import com.pulumi.azuread.Application;
import com.pulumi.azuread.ApplicationArgs;
import com.pulumi.azuread.ServicePrincipal;
import com.pulumi.azuread.ServicePrincipalArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        final var exampleApplicationTemplate = AzureadFunctions.getApplicationTemplate(GetApplicationTemplateArgs.builder()
            .displayName("Marketo")
            .build());

        var exampleApplication = new Application("exampleApplication", ApplicationArgs.builder()        
            .displayName("example")
            .templateId(exampleApplicationTemplate.applyValue(getApplicationTemplateResult -> getApplicationTemplateResult.templateId()))
            .build());

        var exampleServicePrincipal = new ServicePrincipal("exampleServicePrincipal", ServicePrincipalArgs.builder()        
            .applicationId(exampleApplication.applicationId())
            .useExisting(true)
            .build());

    }
}

import pulumi
import pulumi_azuread as azuread

example_application_template = azuread.get_application_template(display_name="Marketo")
example_application = azuread.Application("exampleApplication",
    display_name="example",
    template_id=example_application_template.template_id)
example_service_principal = azuread.ServicePrincipal("exampleServicePrincipal",
    application_id=example_application.application_id,
    use_existing=True)

import * as pulumi from "@pulumi/pulumi";
import * as azuread from "@pulumi/azuread";

const exampleApplicationTemplate = azuread.getApplicationTemplate({
    displayName: "Marketo",
});
const exampleApplication = new azuread.Application("exampleApplication", {
    displayName: "example",
    templateId: exampleApplicationTemplate.then(exampleApplicationTemplate => exampleApplicationTemplate.templateId),
});
const exampleServicePrincipal = new azuread.ServicePrincipal("exampleServicePrincipal", {
    applicationId: exampleApplication.applicationId,
    useExisting: true,
});

resources:
  exampleApplication:
    type: azuread:Application
    properties:
      displayName: example
      templateId: ${exampleApplicationTemplate.templateId}
  exampleServicePrincipal:
    type: azuread:ServicePrincipal
    properties:
      applicationId: ${exampleApplication.applicationId}
      useExisting: true
variables:
  exampleApplicationTemplate:
    fn::invoke:
      Function: azuread:getApplicationTemplate
      Arguments:
        displayName: Marketo

Create Application Resource

new Application(name: string, args: ApplicationArgs, opts?: CustomResourceOptions);
@overload
def Application(resource_name: str,
                opts: Optional[ResourceOptions] = None,
                api: Optional[ApplicationApiArgs] = None,
                app_roles: Optional[Sequence[ApplicationAppRoleArgs]] = None,
                description: Optional[str] = None,
                device_only_auth_enabled: Optional[bool] = None,
                display_name: Optional[str] = None,
                fallback_public_client_enabled: Optional[bool] = None,
                feature_tags: Optional[Sequence[ApplicationFeatureTagArgs]] = None,
                group_membership_claims: Optional[Sequence[str]] = None,
                identifier_uris: Optional[Sequence[str]] = None,
                logo_image: Optional[str] = None,
                marketing_url: Optional[str] = None,
                notes: Optional[str] = None,
                oauth2_post_response_required: Optional[bool] = None,
                optional_claims: Optional[ApplicationOptionalClaimsArgs] = None,
                owners: Optional[Sequence[str]] = None,
                prevent_duplicate_names: Optional[bool] = None,
                privacy_statement_url: Optional[str] = None,
                public_client: Optional[ApplicationPublicClientArgs] = None,
                required_resource_accesses: Optional[Sequence[ApplicationRequiredResourceAccessArgs]] = None,
                service_management_reference: Optional[str] = None,
                sign_in_audience: Optional[str] = None,
                single_page_application: Optional[ApplicationSinglePageApplicationArgs] = None,
                support_url: Optional[str] = None,
                tags: Optional[Sequence[str]] = None,
                template_id: Optional[str] = None,
                terms_of_service_url: Optional[str] = None,
                web: Optional[ApplicationWebArgs] = None)
@overload
def Application(resource_name: str,
                args: ApplicationArgs,
                opts: Optional[ResourceOptions] = None)
func NewApplication(ctx *Context, name string, args ApplicationArgs, opts ...ResourceOption) (*Application, error)
public Application(string name, ApplicationArgs args, CustomResourceOptions? opts = null)
public Application(String name, ApplicationArgs args)
public Application(String name, ApplicationArgs args, CustomResourceOptions options)

type: azuread:Application
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
name string
The unique name of the resource.
args ApplicationArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
resource_name str
The unique name of the resource.
args ApplicationArgs
The arguments to resource properties.
opts ResourceOptions
Bag of options to control resource's behavior.
ctx Context
Context object for the current deployment.
name string
The unique name of the resource.
args ApplicationArgs
The arguments to resource properties.
opts ResourceOption
Bag of options to control resource's behavior.
name string
The unique name of the resource.
args ApplicationArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
name String
The unique name of the resource.
args ApplicationArgs
The arguments to resource properties.
options CustomResourceOptions
Bag of options to control resource's behavior.

Application Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

The Application resource accepts the following input properties:

DisplayName string

The display name for the application.

Api Pulumi.AzureAD.Inputs.ApplicationApiArgs

An api block as documented below, which configures API related settings for this application.

AppRoles List<Pulumi.AzureAD.Inputs.ApplicationAppRoleArgs>

A collection of app_role blocks as documented below. For more information see official documentation on Application Roles.

Description string

A description of the application, as shown to end users.

DeviceOnlyAuthEnabled bool

Specifies whether this application supports device authentication without a user. Defaults to false.

FallbackPublicClientEnabled bool

Specifies whether the application is a public client. Appropriate for apps using token grant flows that don't use a redirect URI. Defaults to false.

FeatureTags List<Pulumi.AzureAD.Inputs.ApplicationFeatureTagArgs>

A feature_tags block as described below. Cannot be used together with the tags property.

Features and Tags Features are configured for an application using tags, and are provided as a shortcut to set the corresponding magic tag value for each feature. You cannot configure feature_tags and tags for an application at the same time, so if you need to assign additional custom tags it's recommended to use the tags property instead. Tag values also propagate to any linked service principals.

GroupMembershipClaims List<string>

Configures the groups claim issued in a user or OAuth 2.0 access token that the app expects. Possible values are None, SecurityGroup, DirectoryRole, ApplicationGroup or All.

IdentifierUris List<string>

A set of user-defined URI(s) that uniquely identify an application within its Azure AD tenant, or within a verified custom domain if the application is multi-tenant.

LogoImage string

A logo image to upload for the application, as a raw base64-encoded string. The image should be in gif, jpeg or png format. Note that once an image has been uploaded, it is not possible to remove it without replacing it with another image.

MarketingUrl string

URL of the application's marketing page.

Notes string

User-specified notes relevant for the management of the application.

Oauth2PostResponseRequired bool

Specifies whether, as part of OAuth 2.0 token requests, Azure AD allows POST requests, as opposed to GET requests. Defaults to false, which specifies that only GET requests are allowed.

OptionalClaims Pulumi.AzureAD.Inputs.ApplicationOptionalClaimsArgs

An optional_claims block as documented below.

Owners List<string>

A list of object IDs of principals that will be granted ownership of the application

PreventDuplicateNames bool

If true, will return an error if an existing application is found with the same name. Defaults to false.

PrivacyStatementUrl string

URL of the application's privacy statement.

PublicClient Pulumi.AzureAD.Inputs.ApplicationPublicClientArgs

A public_client block as documented below, which configures non-web app or non-web API application settings, for example mobile or other public clients such as an installed application running on a desktop device.

RequiredResourceAccesses List<Pulumi.AzureAD.Inputs.ApplicationRequiredResourceAccessArgs>

A collection of required_resource_access blocks as documented below.

ServiceManagementReference string

References application context information from a Service or Asset Management database.

SignInAudience string

The Microsoft account types that are supported for the current application. Must be one of AzureADMyOrg, AzureADMultipleOrgs, AzureADandPersonalMicrosoftAccount or PersonalMicrosoftAccount. Defaults to AzureADMyOrg.

Changing sign_in_audience for existing applications When updating an existing application to use a sign_in_audience value of AzureADandPersonalMicrosoftAccount or PersonalMicrosoftAccount, your configuration may no longer be valid. Refer to official documentation to understand the differences in supported configurations. Where possible, the provider will attempt to validate your configuration and try to avoid applying unsupported settings to your application.

SinglePageApplication Pulumi.AzureAD.Inputs.ApplicationSinglePageApplicationArgs

A single_page_application block as documented below, which configures single-page application (SPA) related settings for this application.

SupportUrl string

URL of the application's support page.

Tags List<string>

A set of tags to apply to the application for configuring specific behaviours of the application and linked service principals. Note that these are not provided for use by practitioners. Cannot be used together with the feature_tags block.

Tags and Features Azure Active Directory uses special tag values to configure the behavior of applications. These can be specified using either the tags property or with the feature_tags block. If you need to set any custom tag values not supported by the feature_tags block, it's recommended to use the tags property. Tag values also propagate to any linked service principals.

TemplateId string

Unique ID for a templated application in the Azure AD App Gallery, from which to create the application. Changing this forces a new resource to be created.

TermsOfServiceUrl string

URL of the application's terms of service statement.

Web Pulumi.AzureAD.Inputs.ApplicationWebArgs

A web block as documented below, which configures web related settings for this application.

Application Name Uniqueness Application names are not unique within Azure Active Directory. Use the prevent_duplicate_names argument to check for existing applications if you want to avoid name collisions.

DisplayName string

The display name for the application.

Api ApplicationApiArgs

An api block as documented below, which configures API related settings for this application.

AppRoles []ApplicationAppRoleArgs

A collection of app_role blocks as documented below. For more information see official documentation on Application Roles.

Description string

A description of the application, as shown to end users.

DeviceOnlyAuthEnabled bool

Specifies whether this application supports device authentication without a user. Defaults to false.

FallbackPublicClientEnabled bool

Specifies whether the application is a public client. Appropriate for apps using token grant flows that don't use a redirect URI. Defaults to false.

FeatureTags []ApplicationFeatureTagArgs

A feature_tags block as described below. Cannot be used together with the tags property.

Features and Tags Features are configured for an application using tags, and are provided as a shortcut to set the corresponding magic tag value for each feature. You cannot configure feature_tags and tags for an application at the same time, so if you need to assign additional custom tags it's recommended to use the tags property instead. Tag values also propagate to any linked service principals.

GroupMembershipClaims []string

Configures the groups claim issued in a user or OAuth 2.0 access token that the app expects. Possible values are None, SecurityGroup, DirectoryRole, ApplicationGroup or All.

IdentifierUris []string

A set of user-defined URI(s) that uniquely identify an application within its Azure AD tenant, or within a verified custom domain if the application is multi-tenant.

LogoImage string

A logo image to upload for the application, as a raw base64-encoded string. The image should be in gif, jpeg or png format. Note that once an image has been uploaded, it is not possible to remove it without replacing it with another image.

MarketingUrl string

URL of the application's marketing page.

Notes string

User-specified notes relevant for the management of the application.

Oauth2PostResponseRequired bool

Specifies whether, as part of OAuth 2.0 token requests, Azure AD allows POST requests, as opposed to GET requests. Defaults to false, which specifies that only GET requests are allowed.

OptionalClaims ApplicationOptionalClaimsArgs

An optional_claims block as documented below.

Owners []string

A list of object IDs of principals that will be granted ownership of the application

PreventDuplicateNames bool

If true, will return an error if an existing application is found with the same name. Defaults to false.

PrivacyStatementUrl string

URL of the application's privacy statement.

PublicClient ApplicationPublicClientArgs

A public_client block as documented below, which configures non-web app or non-web API application settings, for example mobile or other public clients such as an installed application running on a desktop device.

RequiredResourceAccesses []ApplicationRequiredResourceAccessArgs

A collection of required_resource_access blocks as documented below.

ServiceManagementReference string

References application context information from a Service or Asset Management database.

SignInAudience string

The Microsoft account types that are supported for the current application. Must be one of AzureADMyOrg, AzureADMultipleOrgs, AzureADandPersonalMicrosoftAccount or PersonalMicrosoftAccount. Defaults to AzureADMyOrg.

Changing sign_in_audience for existing applications When updating an existing application to use a sign_in_audience value of AzureADandPersonalMicrosoftAccount or PersonalMicrosoftAccount, your configuration may no longer be valid. Refer to official documentation to understand the differences in supported configurations. Where possible, the provider will attempt to validate your configuration and try to avoid applying unsupported settings to your application.

SinglePageApplication ApplicationSinglePageApplicationArgs

A single_page_application block as documented below, which configures single-page application (SPA) related settings for this application.

SupportUrl string

URL of the application's support page.

Tags []string

A set of tags to apply to the application for configuring specific behaviours of the application and linked service principals. Note that these are not provided for use by practitioners. Cannot be used together with the feature_tags block.

Tags and Features Azure Active Directory uses special tag values to configure the behavior of applications. These can be specified using either the tags property or with the feature_tags block. If you need to set any custom tag values not supported by the feature_tags block, it's recommended to use the tags property. Tag values also propagate to any linked service principals.

TemplateId string

Unique ID for a templated application in the Azure AD App Gallery, from which to create the application. Changing this forces a new resource to be created.

TermsOfServiceUrl string

URL of the application's terms of service statement.

Web ApplicationWebArgs

A web block as documented below, which configures web related settings for this application.

Application Name Uniqueness Application names are not unique within Azure Active Directory. Use the prevent_duplicate_names argument to check for existing applications if you want to avoid name collisions.

displayName String

The display name for the application.

api ApplicationApiArgs

An api block as documented below, which configures API related settings for this application.

appRoles List<ApplicationAppRoleArgs>

A collection of app_role blocks as documented below. For more information see official documentation on Application Roles.

description String

A description of the application, as shown to end users.

deviceOnlyAuthEnabled Boolean

Specifies whether this application supports device authentication without a user. Defaults to false.

fallbackPublicClientEnabled Boolean

Specifies whether the application is a public client. Appropriate for apps using token grant flows that don't use a redirect URI. Defaults to false.

featureTags List<ApplicationFeatureTagArgs>

A feature_tags block as described below. Cannot be used together with the tags property.

Features and Tags Features are configured for an application using tags, and are provided as a shortcut to set the corresponding magic tag value for each feature. You cannot configure feature_tags and tags for an application at the same time, so if you need to assign additional custom tags it's recommended to use the tags property instead. Tag values also propagate to any linked service principals.

groupMembershipClaims List<String>

Configures the groups claim issued in a user or OAuth 2.0 access token that the app expects. Possible values are None, SecurityGroup, DirectoryRole, ApplicationGroup or All.

identifierUris List<String>

A set of user-defined URI(s) that uniquely identify an application within its Azure AD tenant, or within a verified custom domain if the application is multi-tenant.

logoImage String

A logo image to upload for the application, as a raw base64-encoded string. The image should be in gif, jpeg or png format. Note that once an image has been uploaded, it is not possible to remove it without replacing it with another image.

marketingUrl String

URL of the application's marketing page.

notes String

User-specified notes relevant for the management of the application.

oauth2PostResponseRequired Boolean

Specifies whether, as part of OAuth 2.0 token requests, Azure AD allows POST requests, as opposed to GET requests. Defaults to false, which specifies that only GET requests are allowed.

optionalClaims ApplicationOptionalClaimsArgs

An optional_claims block as documented below.

owners List<String>

A list of object IDs of principals that will be granted ownership of the application

preventDuplicateNames Boolean

If true, will return an error if an existing application is found with the same name. Defaults to false.

privacyStatementUrl String

URL of the application's privacy statement.

publicClient ApplicationPublicClientArgs

A public_client block as documented below, which configures non-web app or non-web API application settings, for example mobile or other public clients such as an installed application running on a desktop device.

requiredResourceAccesses List<ApplicationRequiredResourceAccessArgs>

A collection of required_resource_access blocks as documented below.

serviceManagementReference String

References application context information from a Service or Asset Management database.

signInAudience String

The Microsoft account types that are supported for the current application. Must be one of AzureADMyOrg, AzureADMultipleOrgs, AzureADandPersonalMicrosoftAccount or PersonalMicrosoftAccount. Defaults to AzureADMyOrg.

Changing sign_in_audience for existing applications When updating an existing application to use a sign_in_audience value of AzureADandPersonalMicrosoftAccount or PersonalMicrosoftAccount, your configuration may no longer be valid. Refer to official documentation to understand the differences in supported configurations. Where possible, the provider will attempt to validate your configuration and try to avoid applying unsupported settings to your application.

singlePageApplication ApplicationSinglePageApplicationArgs

A single_page_application block as documented below, which configures single-page application (SPA) related settings for this application.

supportUrl String

URL of the application's support page.

tags List<String>

A set of tags to apply to the application for configuring specific behaviours of the application and linked service principals. Note that these are not provided for use by practitioners. Cannot be used together with the feature_tags block.

Tags and Features Azure Active Directory uses special tag values to configure the behavior of applications. These can be specified using either the tags property or with the feature_tags block. If you need to set any custom tag values not supported by the feature_tags block, it's recommended to use the tags property. Tag values also propagate to any linked service principals.

templateId String

Unique ID for a templated application in the Azure AD App Gallery, from which to create the application. Changing this forces a new resource to be created.

termsOfServiceUrl String

URL of the application's terms of service statement.

web ApplicationWebArgs

A web block as documented below, which configures web related settings for this application.

Application Name Uniqueness Application names are not unique within Azure Active Directory. Use the prevent_duplicate_names argument to check for existing applications if you want to avoid name collisions.

displayName string

The display name for the application.

api ApplicationApiArgs

An api block as documented below, which configures API related settings for this application.

appRoles ApplicationAppRoleArgs[]

A collection of app_role blocks as documented below. For more information see official documentation on Application Roles.

description string

A description of the application, as shown to end users.

deviceOnlyAuthEnabled boolean

Specifies whether this application supports device authentication without a user. Defaults to false.

fallbackPublicClientEnabled boolean

Specifies whether the application is a public client. Appropriate for apps using token grant flows that don't use a redirect URI. Defaults to false.

featureTags ApplicationFeatureTagArgs[]

A feature_tags block as described below. Cannot be used together with the tags property.

Features and Tags Features are configured for an application using tags, and are provided as a shortcut to set the corresponding magic tag value for each feature. You cannot configure feature_tags and tags for an application at the same time, so if you need to assign additional custom tags it's recommended to use the tags property instead. Tag values also propagate to any linked service principals.

groupMembershipClaims string[]

Configures the groups claim issued in a user or OAuth 2.0 access token that the app expects. Possible values are None, SecurityGroup, DirectoryRole, ApplicationGroup or All.

identifierUris string[]

A set of user-defined URI(s) that uniquely identify an application within its Azure AD tenant, or within a verified custom domain if the application is multi-tenant.

logoImage string

A logo image to upload for the application, as a raw base64-encoded string. The image should be in gif, jpeg or png format. Note that once an image has been uploaded, it is not possible to remove it without replacing it with another image.

marketingUrl string

URL of the application's marketing page.

notes string

User-specified notes relevant for the management of the application.

oauth2PostResponseRequired boolean

Specifies whether, as part of OAuth 2.0 token requests, Azure AD allows POST requests, as opposed to GET requests. Defaults to false, which specifies that only GET requests are allowed.

optionalClaims ApplicationOptionalClaimsArgs

An optional_claims block as documented below.

owners string[]

A list of object IDs of principals that will be granted ownership of the application

preventDuplicateNames boolean

If true, will return an error if an existing application is found with the same name. Defaults to false.

privacyStatementUrl string

URL of the application's privacy statement.

publicClient ApplicationPublicClientArgs

A public_client block as documented below, which configures non-web app or non-web API application settings, for example mobile or other public clients such as an installed application running on a desktop device.

requiredResourceAccesses ApplicationRequiredResourceAccessArgs[]

A collection of required_resource_access blocks as documented below.

serviceManagementReference string

References application context information from a Service or Asset Management database.

signInAudience string

The Microsoft account types that are supported for the current application. Must be one of AzureADMyOrg, AzureADMultipleOrgs, AzureADandPersonalMicrosoftAccount or PersonalMicrosoftAccount. Defaults to AzureADMyOrg.

Changing sign_in_audience for existing applications When updating an existing application to use a sign_in_audience value of AzureADandPersonalMicrosoftAccount or PersonalMicrosoftAccount, your configuration may no longer be valid. Refer to official documentation to understand the differences in supported configurations. Where possible, the provider will attempt to validate your configuration and try to avoid applying unsupported settings to your application.

singlePageApplication ApplicationSinglePageApplicationArgs

A single_page_application block as documented below, which configures single-page application (SPA) related settings for this application.

supportUrl string

URL of the application's support page.

tags string[]

A set of tags to apply to the application for configuring specific behaviours of the application and linked service principals. Note that these are not provided for use by practitioners. Cannot be used together with the feature_tags block.

Tags and Features Azure Active Directory uses special tag values to configure the behavior of applications. These can be specified using either the tags property or with the feature_tags block. If you need to set any custom tag values not supported by the feature_tags block, it's recommended to use the tags property. Tag values also propagate to any linked service principals.

templateId string

Unique ID for a templated application in the Azure AD App Gallery, from which to create the application. Changing this forces a new resource to be created.

termsOfServiceUrl string

URL of the application's terms of service statement.

web ApplicationWebArgs

A web block as documented below, which configures web related settings for this application.

Application Name Uniqueness Application names are not unique within Azure Active Directory. Use the prevent_duplicate_names argument to check for existing applications if you want to avoid name collisions.

display_name str

The display name for the application.

api ApplicationApiArgs

An api block as documented below, which configures API related settings for this application.

app_roles Sequence[ApplicationAppRoleArgs]

A collection of app_role blocks as documented below. For more information see official documentation on Application Roles.

description str

A description of the application, as shown to end users.

device_only_auth_enabled bool

Specifies whether this application supports device authentication without a user. Defaults to false.

fallback_public_client_enabled bool

Specifies whether the application is a public client. Appropriate for apps using token grant flows that don't use a redirect URI. Defaults to false.

feature_tags Sequence[ApplicationFeatureTagArgs]

A feature_tags block as described below. Cannot be used together with the tags property.

Features and Tags Features are configured for an application using tags, and are provided as a shortcut to set the corresponding magic tag value for each feature. You cannot configure feature_tags and tags for an application at the same time, so if you need to assign additional custom tags it's recommended to use the tags property instead. Tag values also propagate to any linked service principals.

group_membership_claims Sequence[str]

Configures the groups claim issued in a user or OAuth 2.0 access token that the app expects. Possible values are None, SecurityGroup, DirectoryRole, ApplicationGroup or All.

identifier_uris Sequence[str]

A set of user-defined URI(s) that uniquely identify an application within its Azure AD tenant, or within a verified custom domain if the application is multi-tenant.

logo_image str

A logo image to upload for the application, as a raw base64-encoded string. The image should be in gif, jpeg or png format. Note that once an image has been uploaded, it is not possible to remove it without replacing it with another image.

marketing_url str

URL of the application's marketing page.

notes str

User-specified notes relevant for the management of the application.

oauth2_post_response_required bool

Specifies whether, as part of OAuth 2.0 token requests, Azure AD allows POST requests, as opposed to GET requests. Defaults to false, which specifies that only GET requests are allowed.

optional_claims ApplicationOptionalClaimsArgs

An optional_claims block as documented below.

owners Sequence[str]

A list of object IDs of principals that will be granted ownership of the application

prevent_duplicate_names bool

If true, will return an error if an existing application is found with the same name. Defaults to false.

privacy_statement_url str

URL of the application's privacy statement.

public_client ApplicationPublicClientArgs

A public_client block as documented below, which configures non-web app or non-web API application settings, for example mobile or other public clients such as an installed application running on a desktop device.

required_resource_accesses Sequence[ApplicationRequiredResourceAccessArgs]

A collection of required_resource_access blocks as documented below.

service_management_reference str

References application context information from a Service or Asset Management database.

sign_in_audience str

The Microsoft account types that are supported for the current application. Must be one of AzureADMyOrg, AzureADMultipleOrgs, AzureADandPersonalMicrosoftAccount or PersonalMicrosoftAccount. Defaults to AzureADMyOrg.

Changing sign_in_audience for existing applications When updating an existing application to use a sign_in_audience value of AzureADandPersonalMicrosoftAccount or PersonalMicrosoftAccount, your configuration may no longer be valid. Refer to official documentation to understand the differences in supported configurations. Where possible, the provider will attempt to validate your configuration and try to avoid applying unsupported settings to your application.

single_page_application ApplicationSinglePageApplicationArgs

A single_page_application block as documented below, which configures single-page application (SPA) related settings for this application.

support_url str

URL of the application's support page.

tags Sequence[str]

A set of tags to apply to the application for configuring specific behaviours of the application and linked service principals. Note that these are not provided for use by practitioners. Cannot be used together with the feature_tags block.

Tags and Features Azure Active Directory uses special tag values to configure the behavior of applications. These can be specified using either the tags property or with the feature_tags block. If you need to set any custom tag values not supported by the feature_tags block, it's recommended to use the tags property. Tag values also propagate to any linked service principals.

template_id str

Unique ID for a templated application in the Azure AD App Gallery, from which to create the application. Changing this forces a new resource to be created.

terms_of_service_url str

URL of the application's terms of service statement.

web ApplicationWebArgs

A web block as documented below, which configures web related settings for this application.

Application Name Uniqueness Application names are not unique within Azure Active Directory. Use the prevent_duplicate_names argument to check for existing applications if you want to avoid name collisions.

displayName String

The display name for the application.

api Property Map

An api block as documented below, which configures API related settings for this application.

appRoles List<Property Map>

A collection of app_role blocks as documented below. For more information see official documentation on Application Roles.

description String

A description of the application, as shown to end users.

deviceOnlyAuthEnabled Boolean

Specifies whether this application supports device authentication without a user. Defaults to false.

fallbackPublicClientEnabled Boolean

Specifies whether the application is a public client. Appropriate for apps using token grant flows that don't use a redirect URI. Defaults to false.

featureTags List<Property Map>

A feature_tags block as described below. Cannot be used together with the tags property.

Features and Tags Features are configured for an application using tags, and are provided as a shortcut to set the corresponding magic tag value for each feature. You cannot configure feature_tags and tags for an application at the same time, so if you need to assign additional custom tags it's recommended to use the tags property instead. Tag values also propagate to any linked service principals.

groupMembershipClaims List<String>

Configures the groups claim issued in a user or OAuth 2.0 access token that the app expects. Possible values are None, SecurityGroup, DirectoryRole, ApplicationGroup or All.

identifierUris List<String>

A set of user-defined URI(s) that uniquely identify an application within its Azure AD tenant, or within a verified custom domain if the application is multi-tenant.

logoImage String

A logo image to upload for the application, as a raw base64-encoded string. The image should be in gif, jpeg or png format. Note that once an image has been uploaded, it is not possible to remove it without replacing it with another image.

marketingUrl String

URL of the application's marketing page.

notes String

User-specified notes relevant for the management of the application.

oauth2PostResponseRequired Boolean

Specifies whether, as part of OAuth 2.0 token requests, Azure AD allows POST requests, as opposed to GET requests. Defaults to false, which specifies that only GET requests are allowed.

optionalClaims Property Map

An optional_claims block as documented below.

owners List<String>

A list of object IDs of principals that will be granted ownership of the application

preventDuplicateNames Boolean

If true, will return an error if an existing application is found with the same name. Defaults to false.

privacyStatementUrl String

URL of the application's privacy statement.

publicClient Property Map

A public_client block as documented below, which configures non-web app or non-web API application settings, for example mobile or other public clients such as an installed application running on a desktop device.

requiredResourceAccesses List<Property Map>

A collection of required_resource_access blocks as documented below.

serviceManagementReference String

References application context information from a Service or Asset Management database.

signInAudience String

The Microsoft account types that are supported for the current application. Must be one of AzureADMyOrg, AzureADMultipleOrgs, AzureADandPersonalMicrosoftAccount or PersonalMicrosoftAccount. Defaults to AzureADMyOrg.

Changing sign_in_audience for existing applications When updating an existing application to use a sign_in_audience value of AzureADandPersonalMicrosoftAccount or PersonalMicrosoftAccount, your configuration may no longer be valid. Refer to official documentation to understand the differences in supported configurations. Where possible, the provider will attempt to validate your configuration and try to avoid applying unsupported settings to your application.

singlePageApplication Property Map

A single_page_application block as documented below, which configures single-page application (SPA) related settings for this application.

supportUrl String

URL of the application's support page.

tags List<String>

A set of tags to apply to the application for configuring specific behaviours of the application and linked service principals. Note that these are not provided for use by practitioners. Cannot be used together with the feature_tags block.

Tags and Features Azure Active Directory uses special tag values to configure the behavior of applications. These can be specified using either the tags property or with the feature_tags block. If you need to set any custom tag values not supported by the feature_tags block, it's recommended to use the tags property. Tag values also propagate to any linked service principals.

templateId String

Unique ID for a templated application in the Azure AD App Gallery, from which to create the application. Changing this forces a new resource to be created.

termsOfServiceUrl String

URL of the application's terms of service statement.

web Property Map

A web block as documented below, which configures web related settings for this application.

Application Name Uniqueness Application names are not unique within Azure Active Directory. Use the prevent_duplicate_names argument to check for existing applications if you want to avoid name collisions.

Outputs

All input properties are implicitly available as output properties. Additionally, the Application resource produces the following output properties:

AppRoleIds Dictionary<string, string>

A mapping of app role values to app role IDs, intended to be useful when referencing app roles in other resources in your configuration.

ApplicationId string

The Application ID (also called Client ID).

DisabledByMicrosoft string

Whether Microsoft has disabled the registered application. If the application is disabled, this will be a string indicating the status/reason, e.g. DisabledDueToViolationOfServicesAgreement

Id string

The provider-assigned unique ID for this managed resource.

LogoUrl string

CDN URL to the application's logo, as uploaded with the logo_image property.

Oauth2PermissionScopeIds Dictionary<string, string>

A mapping of OAuth2.0 permission scope values to scope IDs, intended to be useful when referencing permission scopes in other resources in your configuration.

ObjectId string

The application's object ID.

PublisherDomain string

The verified publisher domain for the application.

AppRoleIds map[string]string

A mapping of app role values to app role IDs, intended to be useful when referencing app roles in other resources in your configuration.

ApplicationId string

The Application ID (also called Client ID).

DisabledByMicrosoft string

Whether Microsoft has disabled the registered application. If the application is disabled, this will be a string indicating the status/reason, e.g. DisabledDueToViolationOfServicesAgreement

Id string

The provider-assigned unique ID for this managed resource.

LogoUrl string

CDN URL to the application's logo, as uploaded with the logo_image property.

Oauth2PermissionScopeIds map[string]string

A mapping of OAuth2.0 permission scope values to scope IDs, intended to be useful when referencing permission scopes in other resources in your configuration.

ObjectId string

The application's object ID.

PublisherDomain string

The verified publisher domain for the application.

appRoleIds Map<String,String>

A mapping of app role values to app role IDs, intended to be useful when referencing app roles in other resources in your configuration.

applicationId String

The Application ID (also called Client ID).

disabledByMicrosoft String

Whether Microsoft has disabled the registered application. If the application is disabled, this will be a string indicating the status/reason, e.g. DisabledDueToViolationOfServicesAgreement

id String

The provider-assigned unique ID for this managed resource.

logoUrl String

CDN URL to the application's logo, as uploaded with the logo_image property.

oauth2PermissionScopeIds Map<String,String>

A mapping of OAuth2.0 permission scope values to scope IDs, intended to be useful when referencing permission scopes in other resources in your configuration.

objectId String

The application's object ID.

publisherDomain String

The verified publisher domain for the application.

appRoleIds {[key: string]: string}

A mapping of app role values to app role IDs, intended to be useful when referencing app roles in other resources in your configuration.

applicationId string

The Application ID (also called Client ID).

disabledByMicrosoft string

Whether Microsoft has disabled the registered application. If the application is disabled, this will be a string indicating the status/reason, e.g. DisabledDueToViolationOfServicesAgreement

id string

The provider-assigned unique ID for this managed resource.

logoUrl string

CDN URL to the application's logo, as uploaded with the logo_image property.

oauth2PermissionScopeIds {[key: string]: string}

A mapping of OAuth2.0 permission scope values to scope IDs, intended to be useful when referencing permission scopes in other resources in your configuration.

objectId string

The application's object ID.

publisherDomain string

The verified publisher domain for the application.

app_role_ids Mapping[str, str]

A mapping of app role values to app role IDs, intended to be useful when referencing app roles in other resources in your configuration.

application_id str

The Application ID (also called Client ID).

disabled_by_microsoft str

Whether Microsoft has disabled the registered application. If the application is disabled, this will be a string indicating the status/reason, e.g. DisabledDueToViolationOfServicesAgreement

id str

The provider-assigned unique ID for this managed resource.

logo_url str

CDN URL to the application's logo, as uploaded with the logo_image property.

oauth2_permission_scope_ids Mapping[str, str]

A mapping of OAuth2.0 permission scope values to scope IDs, intended to be useful when referencing permission scopes in other resources in your configuration.

object_id str

The application's object ID.

publisher_domain str

The verified publisher domain for the application.

appRoleIds Map<String>

A mapping of app role values to app role IDs, intended to be useful when referencing app roles in other resources in your configuration.

applicationId String

The Application ID (also called Client ID).

disabledByMicrosoft String

Whether Microsoft has disabled the registered application. If the application is disabled, this will be a string indicating the status/reason, e.g. DisabledDueToViolationOfServicesAgreement

id String

The provider-assigned unique ID for this managed resource.

logoUrl String

CDN URL to the application's logo, as uploaded with the logo_image property.

oauth2PermissionScopeIds Map<String>

A mapping of OAuth2.0 permission scope values to scope IDs, intended to be useful when referencing permission scopes in other resources in your configuration.

objectId String

The application's object ID.

publisherDomain String

The verified publisher domain for the application.

Look up Existing Application Resource

Get an existing Application resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

public static get(name: string, id: Input<ID>, state?: ApplicationState, opts?: CustomResourceOptions): Application
@staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        api: Optional[ApplicationApiArgs] = None,
        app_role_ids: Optional[Mapping[str, str]] = None,
        app_roles: Optional[Sequence[ApplicationAppRoleArgs]] = None,
        application_id: Optional[str] = None,
        description: Optional[str] = None,
        device_only_auth_enabled: Optional[bool] = None,
        disabled_by_microsoft: Optional[str] = None,
        display_name: Optional[str] = None,
        fallback_public_client_enabled: Optional[bool] = None,
        feature_tags: Optional[Sequence[ApplicationFeatureTagArgs]] = None,
        group_membership_claims: Optional[Sequence[str]] = None,
        identifier_uris: Optional[Sequence[str]] = None,
        logo_image: Optional[str] = None,
        logo_url: Optional[str] = None,
        marketing_url: Optional[str] = None,
        notes: Optional[str] = None,
        oauth2_permission_scope_ids: Optional[Mapping[str, str]] = None,
        oauth2_post_response_required: Optional[bool] = None,
        object_id: Optional[str] = None,
        optional_claims: Optional[ApplicationOptionalClaimsArgs] = None,
        owners: Optional[Sequence[str]] = None,
        prevent_duplicate_names: Optional[bool] = None,
        privacy_statement_url: Optional[str] = None,
        public_client: Optional[ApplicationPublicClientArgs] = None,
        publisher_domain: Optional[str] = None,
        required_resource_accesses: Optional[Sequence[ApplicationRequiredResourceAccessArgs]] = None,
        service_management_reference: Optional[str] = None,
        sign_in_audience: Optional[str] = None,
        single_page_application: Optional[ApplicationSinglePageApplicationArgs] = None,
        support_url: Optional[str] = None,
        tags: Optional[Sequence[str]] = None,
        template_id: Optional[str] = None,
        terms_of_service_url: Optional[str] = None,
        web: Optional[ApplicationWebArgs] = None) -> Application
func GetApplication(ctx *Context, name string, id IDInput, state *ApplicationState, opts ...ResourceOption) (*Application, error)
public static Application Get(string name, Input<string> id, ApplicationState? state, CustomResourceOptions? opts = null)
public static Application get(String name, Output<String> id, ApplicationState state, CustomResourceOptions options)
Resource lookup is not supported in YAML
name
The unique name of the resulting resource.
id
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
resource_name
The unique name of the resulting resource.
id
The unique provider ID of the resource to lookup.
name
The unique name of the resulting resource.
id
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name
The unique name of the resulting resource.
id
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name
The unique name of the resulting resource.
id
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
The following state arguments are supported:
Api Pulumi.AzureAD.Inputs.ApplicationApiArgs

An api block as documented below, which configures API related settings for this application.

AppRoleIds Dictionary<string, string>

A mapping of app role values to app role IDs, intended to be useful when referencing app roles in other resources in your configuration.

AppRoles List<Pulumi.AzureAD.Inputs.ApplicationAppRoleArgs>

A collection of app_role blocks as documented below. For more information see official documentation on Application Roles.

ApplicationId string

The Application ID (also called Client ID).

Description string

A description of the application, as shown to end users.

DeviceOnlyAuthEnabled bool

Specifies whether this application supports device authentication without a user. Defaults to false.

DisabledByMicrosoft string

Whether Microsoft has disabled the registered application. If the application is disabled, this will be a string indicating the status/reason, e.g. DisabledDueToViolationOfServicesAgreement

DisplayName string

The display name for the application.

FallbackPublicClientEnabled bool

Specifies whether the application is a public client. Appropriate for apps using token grant flows that don't use a redirect URI. Defaults to false.

FeatureTags List<Pulumi.AzureAD.Inputs.ApplicationFeatureTagArgs>

A feature_tags block as described below. Cannot be used together with the tags property.

Features and Tags Features are configured for an application using tags, and are provided as a shortcut to set the corresponding magic tag value for each feature. You cannot configure feature_tags and tags for an application at the same time, so if you need to assign additional custom tags it's recommended to use the tags property instead. Tag values also propagate to any linked service principals.

GroupMembershipClaims List<string>

Configures the groups claim issued in a user or OAuth 2.0 access token that the app expects. Possible values are None, SecurityGroup, DirectoryRole, ApplicationGroup or All.

IdentifierUris List<string>

A set of user-defined URI(s) that uniquely identify an application within its Azure AD tenant, or within a verified custom domain if the application is multi-tenant.

LogoImage string

A logo image to upload for the application, as a raw base64-encoded string. The image should be in gif, jpeg or png format. Note that once an image has been uploaded, it is not possible to remove it without replacing it with another image.

LogoUrl string

CDN URL to the application's logo, as uploaded with the logo_image property.

MarketingUrl string

URL of the application's marketing page.

Notes string

User-specified notes relevant for the management of the application.

Oauth2PermissionScopeIds Dictionary<string, string>

A mapping of OAuth2.0 permission scope values to scope IDs, intended to be useful when referencing permission scopes in other resources in your configuration.

Oauth2PostResponseRequired bool

Specifies whether, as part of OAuth 2.0 token requests, Azure AD allows POST requests, as opposed to GET requests. Defaults to false, which specifies that only GET requests are allowed.

ObjectId string

The application's object ID.

OptionalClaims Pulumi.AzureAD.Inputs.ApplicationOptionalClaimsArgs

An optional_claims block as documented below.

Owners List<string>

A list of object IDs of principals that will be granted ownership of the application

PreventDuplicateNames bool

If true, will return an error if an existing application is found with the same name. Defaults to false.

PrivacyStatementUrl string

URL of the application's privacy statement.

PublicClient Pulumi.AzureAD.Inputs.ApplicationPublicClientArgs

A public_client block as documented below, which configures non-web app or non-web API application settings, for example mobile or other public clients such as an installed application running on a desktop device.

PublisherDomain string

The verified publisher domain for the application.

RequiredResourceAccesses List<Pulumi.AzureAD.Inputs.ApplicationRequiredResourceAccessArgs>

A collection of required_resource_access blocks as documented below.

ServiceManagementReference string

References application context information from a Service or Asset Management database.

SignInAudience string

The Microsoft account types that are supported for the current application. Must be one of AzureADMyOrg, AzureADMultipleOrgs, AzureADandPersonalMicrosoftAccount or PersonalMicrosoftAccount. Defaults to AzureADMyOrg.

Changing sign_in_audience for existing applications When updating an existing application to use a sign_in_audience value of AzureADandPersonalMicrosoftAccount or PersonalMicrosoftAccount, your configuration may no longer be valid. Refer to official documentation to understand the differences in supported configurations. Where possible, the provider will attempt to validate your configuration and try to avoid applying unsupported settings to your application.

SinglePageApplication Pulumi.AzureAD.Inputs.ApplicationSinglePageApplicationArgs

A single_page_application block as documented below, which configures single-page application (SPA) related settings for this application.

SupportUrl string

URL of the application's support page.

Tags List<string>

A set of tags to apply to the application for configuring specific behaviours of the application and linked service principals. Note that these are not provided for use by practitioners. Cannot be used together with the feature_tags block.

Tags and Features Azure Active Directory uses special tag values to configure the behavior of applications. These can be specified using either the tags property or with the feature_tags block. If you need to set any custom tag values not supported by the feature_tags block, it's recommended to use the tags property. Tag values also propagate to any linked service principals.

TemplateId string

Unique ID for a templated application in the Azure AD App Gallery, from which to create the application. Changing this forces a new resource to be created.

TermsOfServiceUrl string

URL of the application's terms of service statement.

Web Pulumi.AzureAD.Inputs.ApplicationWebArgs

A web block as documented below, which configures web related settings for this application.

Application Name Uniqueness Application names are not unique within Azure Active Directory. Use the prevent_duplicate_names argument to check for existing applications if you want to avoid name collisions.

Api ApplicationApiArgs

An api block as documented below, which configures API related settings for this application.

AppRoleIds map[string]string

A mapping of app role values to app role IDs, intended to be useful when referencing app roles in other resources in your configuration.

AppRoles []ApplicationAppRoleArgs

A collection of app_role blocks as documented below. For more information see official documentation on Application Roles.

ApplicationId string

The Application ID (also called Client ID).

Description string

A description of the application, as shown to end users.

DeviceOnlyAuthEnabled bool

Specifies whether this application supports device authentication without a user. Defaults to false.

DisabledByMicrosoft string

Whether Microsoft has disabled the registered application. If the application is disabled, this will be a string indicating the status/reason, e.g. DisabledDueToViolationOfServicesAgreement

DisplayName string

The display name for the application.

FallbackPublicClientEnabled bool

Specifies whether the application is a public client. Appropriate for apps using token grant flows that don't use a redirect URI. Defaults to false.

FeatureTags []ApplicationFeatureTagArgs

A feature_tags block as described below. Cannot be used together with the tags property.

Features and Tags Features are configured for an application using tags, and are provided as a shortcut to set the corresponding magic tag value for each feature. You cannot configure feature_tags and tags for an application at the same time, so if you need to assign additional custom tags it's recommended to use the tags property instead. Tag values also propagate to any linked service principals.

GroupMembershipClaims []string

Configures the groups claim issued in a user or OAuth 2.0 access token that the app expects. Possible values are None, SecurityGroup, DirectoryRole, ApplicationGroup or All.

IdentifierUris []string

A set of user-defined URI(s) that uniquely identify an application within its Azure AD tenant, or within a verified custom domain if the application is multi-tenant.

LogoImage string

A logo image to upload for the application, as a raw base64-encoded string. The image should be in gif, jpeg or png format. Note that once an image has been uploaded, it is not possible to remove it without replacing it with another image.

LogoUrl string

CDN URL to the application's logo, as uploaded with the logo_image property.

MarketingUrl string

URL of the application's marketing page.

Notes string

User-specified notes relevant for the management of the application.

Oauth2PermissionScopeIds map[string]string

A mapping of OAuth2.0 permission scope values to scope IDs, intended to be useful when referencing permission scopes in other resources in your configuration.

Oauth2PostResponseRequired bool

Specifies whether, as part of OAuth 2.0 token requests, Azure AD allows POST requests, as opposed to GET requests. Defaults to false, which specifies that only GET requests are allowed.

ObjectId string

The application's object ID.

OptionalClaims ApplicationOptionalClaimsArgs

An optional_claims block as documented below.

Owners []string

A list of object IDs of principals that will be granted ownership of the application

PreventDuplicateNames bool

If true, will return an error if an existing application is found with the same name. Defaults to false.

PrivacyStatementUrl string

URL of the application's privacy statement.

PublicClient ApplicationPublicClientArgs

A public_client block as documented below, which configures non-web app or non-web API application settings, for example mobile or other public clients such as an installed application running on a desktop device.

PublisherDomain string

The verified publisher domain for the application.

RequiredResourceAccesses []ApplicationRequiredResourceAccessArgs

A collection of required_resource_access blocks as documented below.

ServiceManagementReference string

References application context information from a Service or Asset Management database.

SignInAudience string

The Microsoft account types that are supported for the current application. Must be one of AzureADMyOrg, AzureADMultipleOrgs, AzureADandPersonalMicrosoftAccount or PersonalMicrosoftAccount. Defaults to AzureADMyOrg.

Changing sign_in_audience for existing applications When updating an existing application to use a sign_in_audience value of AzureADandPersonalMicrosoftAccount or PersonalMicrosoftAccount, your configuration may no longer be valid. Refer to official documentation to understand the differences in supported configurations. Where possible, the provider will attempt to validate your configuration and try to avoid applying unsupported settings to your application.

SinglePageApplication ApplicationSinglePageApplicationArgs

A single_page_application block as documented below, which configures single-page application (SPA) related settings for this application.

SupportUrl string

URL of the application's support page.

Tags []string

A set of tags to apply to the application for configuring specific behaviours of the application and linked service principals. Note that these are not provided for use by practitioners. Cannot be used together with the feature_tags block.

Tags and Features Azure Active Directory uses special tag values to configure the behavior of applications. These can be specified using either the tags property or with the feature_tags block. If you need to set any custom tag values not supported by the feature_tags block, it's recommended to use the tags property. Tag values also propagate to any linked service principals.

TemplateId string

Unique ID for a templated application in the Azure AD App Gallery, from which to create the application. Changing this forces a new resource to be created.

TermsOfServiceUrl string

URL of the application's terms of service statement.

Web ApplicationWebArgs

A web block as documented below, which configures web related settings for this application.

Application Name Uniqueness Application names are not unique within Azure Active Directory. Use the prevent_duplicate_names argument to check for existing applications if you want to avoid name collisions.

api ApplicationApiArgs

An api block as documented below, which configures API related settings for this application.

appRoleIds Map<String,String>

A mapping of app role values to app role IDs, intended to be useful when referencing app roles in other resources in your configuration.

appRoles List<ApplicationAppRoleArgs>

A collection of app_role blocks as documented below. For more information see official documentation on Application Roles.

applicationId String

The Application ID (also called Client ID).

description String

A description of the application, as shown to end users.

deviceOnlyAuthEnabled Boolean

Specifies whether this application supports device authentication without a user. Defaults to false.

disabledByMicrosoft String

Whether Microsoft has disabled the registered application. If the application is disabled, this will be a string indicating the status/reason, e.g. DisabledDueToViolationOfServicesAgreement

displayName String

The display name for the application.

fallbackPublicClientEnabled Boolean

Specifies whether the application is a public client. Appropriate for apps using token grant flows that don't use a redirect URI. Defaults to false.

featureTags List<ApplicationFeatureTagArgs>

A feature_tags block as described below. Cannot be used together with the tags property.

Features and Tags Features are configured for an application using tags, and are provided as a shortcut to set the corresponding magic tag value for each feature. You cannot configure feature_tags and tags for an application at the same time, so if you need to assign additional custom tags it's recommended to use the tags property instead. Tag values also propagate to any linked service principals.

groupMembershipClaims List<String>

Configures the groups claim issued in a user or OAuth 2.0 access token that the app expects. Possible values are None, SecurityGroup, DirectoryRole, ApplicationGroup or All.

identifierUris List<String>

A set of user-defined URI(s) that uniquely identify an application within its Azure AD tenant, or within a verified custom domain if the application is multi-tenant.

logoImage String

A logo image to upload for the application, as a raw base64-encoded string. The image should be in gif, jpeg or png format. Note that once an image has been uploaded, it is not possible to remove it without replacing it with another image.

logoUrl String

CDN URL to the application's logo, as uploaded with the logo_image property.

marketingUrl String

URL of the application's marketing page.

notes String

User-specified notes relevant for the management of the application.

oauth2PermissionScopeIds Map<String,String>

A mapping of OAuth2.0 permission scope values to scope IDs, intended to be useful when referencing permission scopes in other resources in your configuration.

oauth2PostResponseRequired Boolean

Specifies whether, as part of OAuth 2.0 token requests, Azure AD allows POST requests, as opposed to GET requests. Defaults to false, which specifies that only GET requests are allowed.

objectId String

The application's object ID.

optionalClaims ApplicationOptionalClaimsArgs

An optional_claims block as documented below.

owners List<String>

A list of object IDs of principals that will be granted ownership of the application

preventDuplicateNames Boolean

If true, will return an error if an existing application is found with the same name. Defaults to false.

privacyStatementUrl String

URL of the application's privacy statement.

publicClient ApplicationPublicClientArgs

A public_client block as documented below, which configures non-web app or non-web API application settings, for example mobile or other public clients such as an installed application running on a desktop device.

publisherDomain String

The verified publisher domain for the application.

requiredResourceAccesses List<ApplicationRequiredResourceAccessArgs>

A collection of required_resource_access blocks as documented below.

serviceManagementReference String

References application context information from a Service or Asset Management database.

signInAudience String

The Microsoft account types that are supported for the current application. Must be one of AzureADMyOrg, AzureADMultipleOrgs, AzureADandPersonalMicrosoftAccount or PersonalMicrosoftAccount. Defaults to AzureADMyOrg.

Changing sign_in_audience for existing applications When updating an existing application to use a sign_in_audience value of AzureADandPersonalMicrosoftAccount or PersonalMicrosoftAccount, your configuration may no longer be valid. Refer to official documentation to understand the differences in supported configurations. Where possible, the provider will attempt to validate your configuration and try to avoid applying unsupported settings to your application.

singlePageApplication ApplicationSinglePageApplicationArgs

A single_page_application block as documented below, which configures single-page application (SPA) related settings for this application.

supportUrl String

URL of the application's support page.

tags List<String>

A set of tags to apply to the application for configuring specific behaviours of the application and linked service principals. Note that these are not provided for use by practitioners. Cannot be used together with the feature_tags block.

Tags and Features Azure Active Directory uses special tag values to configure the behavior of applications. These can be specified using either the tags property or with the feature_tags block. If you need to set any custom tag values not supported by the feature_tags block, it's recommended to use the tags property. Tag values also propagate to any linked service principals.

templateId String

Unique ID for a templated application in the Azure AD App Gallery, from which to create the application. Changing this forces a new resource to be created.

termsOfServiceUrl String

URL of the application's terms of service statement.

web ApplicationWebArgs

A web block as documented below, which configures web related settings for this application.

Application Name Uniqueness Application names are not unique within Azure Active Directory. Use the prevent_duplicate_names argument to check for existing applications if you want to avoid name collisions.

api ApplicationApiArgs

An api block as documented below, which configures API related settings for this application.

appRoleIds {[key: string]: string}

A mapping of app role values to app role IDs, intended to be useful when referencing app roles in other resources in your configuration.

appRoles ApplicationAppRoleArgs[]

A collection of app_role blocks as documented below. For more information see official documentation on Application Roles.

applicationId string

The Application ID (also called Client ID).

description string

A description of the application, as shown to end users.

deviceOnlyAuthEnabled boolean

Specifies whether this application supports device authentication without a user. Defaults to false.

disabledByMicrosoft string

Whether Microsoft has disabled the registered application. If the application is disabled, this will be a string indicating the status/reason, e.g. DisabledDueToViolationOfServicesAgreement

displayName string

The display name for the application.

fallbackPublicClientEnabled boolean

Specifies whether the application is a public client. Appropriate for apps using token grant flows that don't use a redirect URI. Defaults to false.

featureTags ApplicationFeatureTagArgs[]

A feature_tags block as described below. Cannot be used together with the tags property.

Features and Tags Features are configured for an application using tags, and are provided as a shortcut to set the corresponding magic tag value for each feature. You cannot configure feature_tags and tags for an application at the same time, so if you need to assign additional custom tags it's recommended to use the tags property instead. Tag values also propagate to any linked service principals.

groupMembershipClaims string[]

Configures the groups claim issued in a user or OAuth 2.0 access token that the app expects. Possible values are None, SecurityGroup, DirectoryRole, ApplicationGroup or All.

identifierUris string[]

A set of user-defined URI(s) that uniquely identify an application within its Azure AD tenant, or within a verified custom domain if the application is multi-tenant.

logoImage string

A logo image to upload for the application, as a raw base64-encoded string. The image should be in gif, jpeg or png format. Note that once an image has been uploaded, it is not possible to remove it without replacing it with another image.

logoUrl string

CDN URL to the application's logo, as uploaded with the logo_image property.

marketingUrl string

URL of the application's marketing page.

notes string

User-specified notes relevant for the management of the application.

oauth2PermissionScopeIds {[key: string]: string}

A mapping of OAuth2.0 permission scope values to scope IDs, intended to be useful when referencing permission scopes in other resources in your configuration.

oauth2PostResponseRequired boolean

Specifies whether, as part of OAuth 2.0 token requests, Azure AD allows POST requests, as opposed to GET requests. Defaults to false, which specifies that only GET requests are allowed.

objectId string

The application's object ID.

optionalClaims ApplicationOptionalClaimsArgs

An optional_claims block as documented below.

owners string[]

A list of object IDs of principals that will be granted ownership of the application

preventDuplicateNames boolean

If true, will return an error if an existing application is found with the same name. Defaults to false.

privacyStatementUrl string

URL of the application's privacy statement.

publicClient ApplicationPublicClientArgs

A public_client block as documented below, which configures non-web app or non-web API application settings, for example mobile or other public clients such as an installed application running on a desktop device.

publisherDomain string

The verified publisher domain for the application.

requiredResourceAccesses ApplicationRequiredResourceAccessArgs[]

A collection of required_resource_access blocks as documented below.

serviceManagementReference string

References application context information from a Service or Asset Management database.

signInAudience string

The Microsoft account types that are supported for the current application. Must be one of AzureADMyOrg, AzureADMultipleOrgs, AzureADandPersonalMicrosoftAccount or PersonalMicrosoftAccount. Defaults to AzureADMyOrg.

Changing sign_in_audience for existing applications When updating an existing application to use a sign_in_audience value of AzureADandPersonalMicrosoftAccount or PersonalMicrosoftAccount, your configuration may no longer be valid. Refer to official documentation to understand the differences in supported configurations. Where possible, the provider will attempt to validate your configuration and try to avoid applying unsupported settings to your application.

singlePageApplication ApplicationSinglePageApplicationArgs

A single_page_application block as documented below, which configures single-page application (SPA) related settings for this application.

supportUrl string

URL of the application's support page.

tags string[]

A set of tags to apply to the application for configuring specific behaviours of the application and linked service principals. Note that these are not provided for use by practitioners. Cannot be used together with the feature_tags block.

Tags and Features Azure Active Directory uses special tag values to configure the behavior of applications. These can be specified using either the tags property or with the feature_tags block. If you need to set any custom tag values not supported by the feature_tags block, it's recommended to use the tags property. Tag values also propagate to any linked service principals.

templateId string

Unique ID for a templated application in the Azure AD App Gallery, from which to create the application. Changing this forces a new resource to be created.

termsOfServiceUrl string

URL of the application's terms of service statement.

web ApplicationWebArgs

A web block as documented below, which configures web related settings for this application.

Application Name Uniqueness Application names are not unique within Azure Active Directory. Use the prevent_duplicate_names argument to check for existing applications if you want to avoid name collisions.

api ApplicationApiArgs

An api block as documented below, which configures API related settings for this application.

app_role_ids Mapping[str, str]

A mapping of app role values to app role IDs, intended to be useful when referencing app roles in other resources in your configuration.

app_roles Sequence[ApplicationAppRoleArgs]

A collection of app_role blocks as documented below. For more information see official documentation on Application Roles.

application_id str

The Application ID (also called Client ID).

description str

A description of the application, as shown to end users.

device_only_auth_enabled bool

Specifies whether this application supports device authentication without a user. Defaults to false.

disabled_by_microsoft str

Whether Microsoft has disabled the registered application. If the application is disabled, this will be a string indicating the status/reason, e.g. DisabledDueToViolationOfServicesAgreement

display_name str

The display name for the application.

fallback_public_client_enabled bool

Specifies whether the application is a public client. Appropriate for apps using token grant flows that don't use a redirect URI. Defaults to false.

feature_tags Sequence[ApplicationFeatureTagArgs]

A feature_tags block as described below. Cannot be used together with the tags property.

Features and Tags Features are configured for an application using tags, and are provided as a shortcut to set the corresponding magic tag value for each feature. You cannot configure feature_tags and tags for an application at the same time, so if you need to assign additional custom tags it's recommended to use the tags property instead. Tag values also propagate to any linked service principals.

group_membership_claims Sequence[str]

Configures the groups claim issued in a user or OAuth 2.0 access token that the app expects. Possible values are None, SecurityGroup, DirectoryRole, ApplicationGroup or All.

identifier_uris Sequence[str]

A set of user-defined URI(s) that uniquely identify an application within its Azure AD tenant, or within a verified custom domain if the application is multi-tenant.

logo_image str

A logo image to upload for the application, as a raw base64-encoded string. The image should be in gif, jpeg or png format. Note that once an image has been uploaded, it is not possible to remove it without replacing it with another image.

logo_url str

CDN URL to the application's logo, as uploaded with the logo_image property.

marketing_url str

URL of the application's marketing page.

notes str

User-specified notes relevant for the management of the application.

oauth2_permission_scope_ids Mapping[str, str]

A mapping of OAuth2.0 permission scope values to scope IDs, intended to be useful when referencing permission scopes in other resources in your configuration.

oauth2_post_response_required bool

Specifies whether, as part of OAuth 2.0 token requests, Azure AD allows POST requests, as opposed to GET requests. Defaults to false, which specifies that only GET requests are allowed.

object_id str

The application's object ID.

optional_claims ApplicationOptionalClaimsArgs

An optional_claims block as documented below.

owners Sequence[str]

A list of object IDs of principals that will be granted ownership of the application

prevent_duplicate_names bool

If true, will return an error if an existing application is found with the same name. Defaults to false.

privacy_statement_url str

URL of the application's privacy statement.

public_client ApplicationPublicClientArgs

A public_client block as documented below, which configures non-web app or non-web API application settings, for example mobile or other public clients such as an installed application running on a desktop device.

publisher_domain str

The verified publisher domain for the application.

required_resource_accesses Sequence[ApplicationRequiredResourceAccessArgs]

A collection of required_resource_access blocks as documented below.

service_management_reference str

References application context information from a Service or Asset Management database.

sign_in_audience str

The Microsoft account types that are supported for the current application. Must be one of AzureADMyOrg, AzureADMultipleOrgs, AzureADandPersonalMicrosoftAccount or PersonalMicrosoftAccount. Defaults to AzureADMyOrg.

Changing sign_in_audience for existing applications When updating an existing application to use a sign_in_audience value of AzureADandPersonalMicrosoftAccount or PersonalMicrosoftAccount, your configuration may no longer be valid. Refer to official documentation to understand the differences in supported configurations. Where possible, the provider will attempt to validate your configuration and try to avoid applying unsupported settings to your application.

single_page_application ApplicationSinglePageApplicationArgs

A single_page_application block as documented below, which configures single-page application (SPA) related settings for this application.

support_url str

URL of the application's support page.

tags Sequence[str]

A set of tags to apply to the application for configuring specific behaviours of the application and linked service principals. Note that these are not provided for use by practitioners. Cannot be used together with the feature_tags block.

Tags and Features Azure Active Directory uses special tag values to configure the behavior of applications. These can be specified using either the tags property or with the feature_tags block. If you need to set any custom tag values not supported by the feature_tags block, it's recommended to use the tags property. Tag values also propagate to any linked service principals.

template_id str

Unique ID for a templated application in the Azure AD App Gallery, from which to create the application. Changing this forces a new resource to be created.

terms_of_service_url str

URL of the application's terms of service statement.

web ApplicationWebArgs

A web block as documented below, which configures web related settings for this application.

Application Name Uniqueness Application names are not unique within Azure Active Directory. Use the prevent_duplicate_names argument to check for existing applications if you want to avoid name collisions.

api Property Map

An api block as documented below, which configures API related settings for this application.

appRoleIds Map<String>

A mapping of app role values to app role IDs, intended to be useful when referencing app roles in other resources in your configuration.

appRoles List<Property Map>

A collection of app_role blocks as documented below. For more information see official documentation on Application Roles.

applicationId String

The Application ID (also called Client ID).

description String

A description of the application, as shown to end users.

deviceOnlyAuthEnabled Boolean

Specifies whether this application supports device authentication without a user. Defaults to false.

disabledByMicrosoft String

Whether Microsoft has disabled the registered application. If the application is disabled, this will be a string indicating the status/reason, e.g. DisabledDueToViolationOfServicesAgreement

displayName String

The display name for the application.

fallbackPublicClientEnabled Boolean

Specifies whether the application is a public client. Appropriate for apps using token grant flows that don't use a redirect URI. Defaults to false.

featureTags List<Property Map>

A feature_tags block as described below. Cannot be used together with the tags property.

Features and Tags Features are configured for an application using tags, and are provided as a shortcut to set the corresponding magic tag value for each feature. You cannot configure feature_tags and tags for an application at the same time, so if you need to assign additional custom tags it's recommended to use the tags property instead. Tag values also propagate to any linked service principals.

groupMembershipClaims List<String>

Configures the groups claim issued in a user or OAuth 2.0 access token that the app expects. Possible values are None, SecurityGroup, DirectoryRole, ApplicationGroup or All.

identifierUris List<String>

A set of user-defined URI(s) that uniquely identify an application within its Azure AD tenant, or within a verified custom domain if the application is multi-tenant.

logoImage String

A logo image to upload for the application, as a raw base64-encoded string. The image should be in gif, jpeg or png format. Note that once an image has been uploaded, it is not possible to remove it without replacing it with another image.

logoUrl String

CDN URL to the application's logo, as uploaded with the logo_image property.

marketingUrl String

URL of the application's marketing page.

notes String

User-specified notes relevant for the management of the application.

oauth2PermissionScopeIds Map<String>

A mapping of OAuth2.0 permission scope values to scope IDs, intended to be useful when referencing permission scopes in other resources in your configuration.

oauth2PostResponseRequired Boolean

Specifies whether, as part of OAuth 2.0 token requests, Azure AD allows POST requests, as opposed to GET requests. Defaults to false, which specifies that only GET requests are allowed.

objectId String

The application's object ID.

optionalClaims Property Map

An optional_claims block as documented below.

owners List<String>

A list of object IDs of principals that will be granted ownership of the application

preventDuplicateNames Boolean

If true, will return an error if an existing application is found with the same name. Defaults to false.

privacyStatementUrl String

URL of the application's privacy statement.

publicClient Property Map

A public_client block as documented below, which configures non-web app or non-web API application settings, for example mobile or other public clients such as an installed application running on a desktop device.

publisherDomain String

The verified publisher domain for the application.

requiredResourceAccesses List<Property Map>

A collection of required_resource_access blocks as documented below.

serviceManagementReference String

References application context information from a Service or Asset Management database.

signInAudience String

The Microsoft account types that are supported for the current application. Must be one of AzureADMyOrg, AzureADMultipleOrgs, AzureADandPersonalMicrosoftAccount or PersonalMicrosoftAccount. Defaults to AzureADMyOrg.

Changing sign_in_audience for existing applications When updating an existing application to use a sign_in_audience value of AzureADandPersonalMicrosoftAccount or PersonalMicrosoftAccount, your configuration may no longer be valid. Refer to official documentation to understand the differences in supported configurations. Where possible, the provider will attempt to validate your configuration and try to avoid applying unsupported settings to your application.

singlePageApplication Property Map

A single_page_application block as documented below, which configures single-page application (SPA) related settings for this application.

supportUrl String

URL of the application's support page.

tags List<String>

A set of tags to apply to the application for configuring specific behaviours of the application and linked service principals. Note that these are not provided for use by practitioners. Cannot be used together with the feature_tags block.

Tags and Features Azure Active Directory uses special tag values to configure the behavior of applications. These can be specified using either the tags property or with the feature_tags block. If you need to set any custom tag values not supported by the feature_tags block, it's recommended to use the tags property. Tag values also propagate to any linked service principals.

templateId String

Unique ID for a templated application in the Azure AD App Gallery, from which to create the application. Changing this forces a new resource to be created.

termsOfServiceUrl String

URL of the application's terms of service statement.

web Property Map

A web block as documented below, which configures web related settings for this application.

Application Name Uniqueness Application names are not unique within Azure Active Directory. Use the prevent_duplicate_names argument to check for existing applications if you want to avoid name collisions.

Supporting Types

ApplicationApi

KnownClientApplications List<string>

A set of application IDs (client IDs), used for bundling consent if you have a solution that contains two parts: a client app and a custom web API app.

MappedClaimsEnabled bool

Allows an application to use claims mapping without specifying a custom signing key. Defaults to false.

Oauth2PermissionScopes List<Pulumi.AzureAD.Inputs.ApplicationApiOauth2PermissionScope>

One or more oauth2_permission_scope blocks as documented below, to describe delegated permissions exposed by the web API represented by this application.

RequestedAccessTokenVersion int

The access token version expected by this resource. Must be one of 1 or 2, and must be 2 when sign_in_audience is either AzureADandPersonalMicrosoftAccount or PersonalMicrosoftAccount Defaults to 1.

KnownClientApplications []string

A set of application IDs (client IDs), used for bundling consent if you have a solution that contains two parts: a client app and a custom web API app.

MappedClaimsEnabled bool

Allows an application to use claims mapping without specifying a custom signing key. Defaults to false.

Oauth2PermissionScopes []ApplicationApiOauth2PermissionScope

One or more oauth2_permission_scope blocks as documented below, to describe delegated permissions exposed by the web API represented by this application.

RequestedAccessTokenVersion int

The access token version expected by this resource. Must be one of 1 or 2, and must be 2 when sign_in_audience is either AzureADandPersonalMicrosoftAccount or PersonalMicrosoftAccount Defaults to 1.

knownClientApplications List<String>

A set of application IDs (client IDs), used for bundling consent if you have a solution that contains two parts: a client app and a custom web API app.

mappedClaimsEnabled Boolean

Allows an application to use claims mapping without specifying a custom signing key. Defaults to false.

oauth2PermissionScopes List<ApplicationApiOauth2PermissionScope>

One or more oauth2_permission_scope blocks as documented below, to describe delegated permissions exposed by the web API represented by this application.

requestedAccessTokenVersion Integer

The access token version expected by this resource. Must be one of 1 or 2, and must be 2 when sign_in_audience is either AzureADandPersonalMicrosoftAccount or PersonalMicrosoftAccount Defaults to 1.

knownClientApplications string[]

A set of application IDs (client IDs), used for bundling consent if you have a solution that contains two parts: a client app and a custom web API app.

mappedClaimsEnabled boolean

Allows an application to use claims mapping without specifying a custom signing key. Defaults to false.

oauth2PermissionScopes ApplicationApiOauth2PermissionScope[]

One or more oauth2_permission_scope blocks as documented below, to describe delegated permissions exposed by the web API represented by this application.

requestedAccessTokenVersion number

The access token version expected by this resource. Must be one of 1 or 2, and must be 2 when sign_in_audience is either AzureADandPersonalMicrosoftAccount or PersonalMicrosoftAccount Defaults to 1.

known_client_applications Sequence[str]

A set of application IDs (client IDs), used for bundling consent if you have a solution that contains two parts: a client app and a custom web API app.

mapped_claims_enabled bool

Allows an application to use claims mapping without specifying a custom signing key. Defaults to false.

oauth2_permission_scopes Sequence[ApplicationApiOauth2PermissionScope]

One or more oauth2_permission_scope blocks as documented below, to describe delegated permissions exposed by the web API represented by this application.

requested_access_token_version int

The access token version expected by this resource. Must be one of 1 or 2, and must be 2 when sign_in_audience is either AzureADandPersonalMicrosoftAccount or PersonalMicrosoftAccount Defaults to 1.

knownClientApplications List<String>

A set of application IDs (client IDs), used for bundling consent if you have a solution that contains two parts: a client app and a custom web API app.

mappedClaimsEnabled Boolean

Allows an application to use claims mapping without specifying a custom signing key. Defaults to false.

oauth2PermissionScopes List<Property Map>

One or more oauth2_permission_scope blocks as documented below, to describe delegated permissions exposed by the web API represented by this application.

requestedAccessTokenVersion Number

The access token version expected by this resource. Must be one of 1 or 2, and must be 2 when sign_in_audience is either AzureADandPersonalMicrosoftAccount or PersonalMicrosoftAccount Defaults to 1.

ApplicationApiOauth2PermissionScope

Id string
AdminConsentDescription string

Delegated permission description that appears in all tenant-wide admin consent experiences, intended to be read by an administrator granting the permission on behalf of all users.

AdminConsentDisplayName string

Display name for the delegated permission, intended to be read by an administrator granting the permission on behalf of all users.

Enabled bool

Determines if the permission scope is enabled. Defaults to true.

Type string

Whether this delegated permission should be considered safe for non-admin users to consent to on behalf of themselves, or whether an administrator should be required for consent to the permissions. Defaults to User. Possible values are User or Admin.

UserConsentDescription string

Delegated permission description that appears in the end user consent experience, intended to be read by a user consenting on their own behalf.

UserConsentDisplayName string

Display name for the delegated permission that appears in the end user consent experience.

Value string
Id string
AdminConsentDescription string

Delegated permission description that appears in all tenant-wide admin consent experiences, intended to be read by an administrator granting the permission on behalf of all users.

AdminConsentDisplayName string

Display name for the delegated permission, intended to be read by an administrator granting the permission on behalf of all users.

Enabled bool

Determines if the permission scope is enabled. Defaults to true.

Type string

Whether this delegated permission should be considered safe for non-admin users to consent to on behalf of themselves, or whether an administrator should be required for consent to the permissions. Defaults to User. Possible values are User or Admin.

UserConsentDescription string

Delegated permission description that appears in the end user consent experience, intended to be read by a user consenting on their own behalf.

UserConsentDisplayName string

Display name for the delegated permission that appears in the end user consent experience.

Value string
id String
adminConsentDescription String

Delegated permission description that appears in all tenant-wide admin consent experiences, intended to be read by an administrator granting the permission on behalf of all users.

adminConsentDisplayName String

Display name for the delegated permission, intended to be read by an administrator granting the permission on behalf of all users.

enabled Boolean

Determines if the permission scope is enabled. Defaults to true.

type String

Whether this delegated permission should be considered safe for non-admin users to consent to on behalf of themselves, or whether an administrator should be required for consent to the permissions. Defaults to User. Possible values are User or Admin.

userConsentDescription String

Delegated permission description that appears in the end user consent experience, intended to be read by a user consenting on their own behalf.

userConsentDisplayName String

Display name for the delegated permission that appears in the end user consent experience.

value String
id string
adminConsentDescription string

Delegated permission description that appears in all tenant-wide admin consent experiences, intended to be read by an administrator granting the permission on behalf of all users.

adminConsentDisplayName string

Display name for the delegated permission, intended to be read by an administrator granting the permission on behalf of all users.

enabled boolean

Determines if the permission scope is enabled. Defaults to true.

type string

Whether this delegated permission should be considered safe for non-admin users to consent to on behalf of themselves, or whether an administrator should be required for consent to the permissions. Defaults to User. Possible values are User or Admin.

userConsentDescription string

Delegated permission description that appears in the end user consent experience, intended to be read by a user consenting on their own behalf.

userConsentDisplayName string

Display name for the delegated permission that appears in the end user consent experience.

value string
id str
admin_consent_description str

Delegated permission description that appears in all tenant-wide admin consent experiences, intended to be read by an administrator granting the permission on behalf of all users.

admin_consent_display_name str

Display name for the delegated permission, intended to be read by an administrator granting the permission on behalf of all users.

enabled bool

Determines if the permission scope is enabled. Defaults to true.

type str

Whether this delegated permission should be considered safe for non-admin users to consent to on behalf of themselves, or whether an administrator should be required for consent to the permissions. Defaults to User. Possible values are User or Admin.

user_consent_description str

Delegated permission description that appears in the end user consent experience, intended to be read by a user consenting on their own behalf.

user_consent_display_name str

Display name for the delegated permission that appears in the end user consent experience.

value str
id String
adminConsentDescription String

Delegated permission description that appears in all tenant-wide admin consent experiences, intended to be read by an administrator granting the permission on behalf of all users.

adminConsentDisplayName String

Display name for the delegated permission, intended to be read by an administrator granting the permission on behalf of all users.

enabled Boolean

Determines if the permission scope is enabled. Defaults to true.

type String

Whether this delegated permission should be considered safe for non-admin users to consent to on behalf of themselves, or whether an administrator should be required for consent to the permissions. Defaults to User. Possible values are User or Admin.

userConsentDescription String

Delegated permission description that appears in the end user consent experience, intended to be read by a user consenting on their own behalf.

userConsentDisplayName String

Display name for the delegated permission that appears in the end user consent experience.

value String

ApplicationAppRole

AllowedMemberTypes List<string>

Specifies whether this app role definition can be assigned to users and groups by setting to User, or to other applications (that are accessing this application in a standalone scenario) by setting to Application, or to both.

Description string

Description of the app role that appears when the role is being assigned and, if the role functions as an application permissions, during the consent experiences.

DisplayName string

Display name for the app role that appears during app role assignment and in consent experiences.

Id string
Enabled bool

Determines if the app role is enabled. Defaults to true.

Value string
AllowedMemberTypes []string

Specifies whether this app role definition can be assigned to users and groups by setting to User, or to other applications (that are accessing this application in a standalone scenario) by setting to Application, or to both.

Description string

Description of the app role that appears when the role is being assigned and, if the role functions as an application permissions, during the consent experiences.

DisplayName string

Display name for the app role that appears during app role assignment and in consent experiences.

Id string
Enabled bool

Determines if the app role is enabled. Defaults to true.

Value string
allowedMemberTypes List<String>

Specifies whether this app role definition can be assigned to users and groups by setting to User, or to other applications (that are accessing this application in a standalone scenario) by setting to Application, or to both.

description String

Description of the app role that appears when the role is being assigned and, if the role functions as an application permissions, during the consent experiences.

displayName String

Display name for the app role that appears during app role assignment and in consent experiences.

id String
enabled Boolean

Determines if the app role is enabled. Defaults to true.

value String
allowedMemberTypes string[]

Specifies whether this app role definition can be assigned to users and groups by setting to User, or to other applications (that are accessing this application in a standalone scenario) by setting to Application, or to both.

description string

Description of the app role that appears when the role is being assigned and, if the role functions as an application permissions, during the consent experiences.

displayName string

Display name for the app role that appears during app role assignment and in consent experiences.

id string
enabled boolean

Determines if the app role is enabled. Defaults to true.

value string
allowed_member_types Sequence[str]

Specifies whether this app role definition can be assigned to users and groups by setting to User, or to other applications (that are accessing this application in a standalone scenario) by setting to Application, or to both.

description str

Description of the app role that appears when the role is being assigned and, if the role functions as an application permissions, during the consent experiences.

display_name str

Display name for the app role that appears during app role assignment and in consent experiences.

id str
enabled bool

Determines if the app role is enabled. Defaults to true.

value str
allowedMemberTypes List<String>

Specifies whether this app role definition can be assigned to users and groups by setting to User, or to other applications (that are accessing this application in a standalone scenario) by setting to Application, or to both.

description String

Description of the app role that appears when the role is being assigned and, if the role functions as an application permissions, during the consent experiences.

displayName String

Display name for the app role that appears during app role assignment and in consent experiences.

id String
enabled Boolean

Determines if the app role is enabled. Defaults to true.

value String

ApplicationFeatureTag

CustomSingleSignOn bool

Whether this application represents a custom SAML application for linked service principals. Enabling this will assign the WindowsAzureActiveDirectoryCustomSingleSignOnApplication tag. Defaults to false.

Enterprise bool

Whether this application represents an Enterprise Application for linked service principals. Enabling this will assign the WindowsAzureActiveDirectoryIntegratedApp tag. Defaults to false.

Gallery bool

Whether this application represents a gallery application for linked service principals. Enabling this will assign the WindowsAzureActiveDirectoryGalleryApplicationNonPrimaryV1 tag. Defaults to false.

Hide bool

Whether this app is invisible to users in My Apps and Office 365 Launcher. Enabling this will assign the HideApp tag. Defaults to false.

CustomSingleSignOn bool

Whether this application represents a custom SAML application for linked service principals. Enabling this will assign the WindowsAzureActiveDirectoryCustomSingleSignOnApplication tag. Defaults to false.

Enterprise bool

Whether this application represents an Enterprise Application for linked service principals. Enabling this will assign the WindowsAzureActiveDirectoryIntegratedApp tag. Defaults to false.

Gallery bool

Whether this application represents a gallery application for linked service principals. Enabling this will assign the WindowsAzureActiveDirectoryGalleryApplicationNonPrimaryV1 tag. Defaults to false.

Hide bool

Whether this app is invisible to users in My Apps and Office 365 Launcher. Enabling this will assign the HideApp tag. Defaults to false.

customSingleSignOn Boolean

Whether this application represents a custom SAML application for linked service principals. Enabling this will assign the WindowsAzureActiveDirectoryCustomSingleSignOnApplication tag. Defaults to false.

enterprise Boolean

Whether this application represents an Enterprise Application for linked service principals. Enabling this will assign the WindowsAzureActiveDirectoryIntegratedApp tag. Defaults to false.

gallery Boolean

Whether this application represents a gallery application for linked service principals. Enabling this will assign the WindowsAzureActiveDirectoryGalleryApplicationNonPrimaryV1 tag. Defaults to false.

hide Boolean

Whether this app is invisible to users in My Apps and Office 365 Launcher. Enabling this will assign the HideApp tag. Defaults to false.

customSingleSignOn boolean

Whether this application represents a custom SAML application for linked service principals. Enabling this will assign the WindowsAzureActiveDirectoryCustomSingleSignOnApplication tag. Defaults to false.

enterprise boolean

Whether this application represents an Enterprise Application for linked service principals. Enabling this will assign the WindowsAzureActiveDirectoryIntegratedApp tag. Defaults to false.

gallery boolean

Whether this application represents a gallery application for linked service principals. Enabling this will assign the WindowsAzureActiveDirectoryGalleryApplicationNonPrimaryV1 tag. Defaults to false.

hide boolean

Whether this app is invisible to users in My Apps and Office 365 Launcher. Enabling this will assign the HideApp tag. Defaults to false.

custom_single_sign_on bool

Whether this application represents a custom SAML application for linked service principals. Enabling this will assign the WindowsAzureActiveDirectoryCustomSingleSignOnApplication tag. Defaults to false.

enterprise bool

Whether this application represents an Enterprise Application for linked service principals. Enabling this will assign the WindowsAzureActiveDirectoryIntegratedApp tag. Defaults to false.

gallery bool

Whether this application represents a gallery application for linked service principals. Enabling this will assign the WindowsAzureActiveDirectoryGalleryApplicationNonPrimaryV1 tag. Defaults to false.

hide bool

Whether this app is invisible to users in My Apps and Office 365 Launcher. Enabling this will assign the HideApp tag. Defaults to false.

customSingleSignOn Boolean

Whether this application represents a custom SAML application for linked service principals. Enabling this will assign the WindowsAzureActiveDirectoryCustomSingleSignOnApplication tag. Defaults to false.

enterprise Boolean

Whether this application represents an Enterprise Application for linked service principals. Enabling this will assign the WindowsAzureActiveDirectoryIntegratedApp tag. Defaults to false.

gallery Boolean

Whether this application represents a gallery application for linked service principals. Enabling this will assign the WindowsAzureActiveDirectoryGalleryApplicationNonPrimaryV1 tag. Defaults to false.

hide Boolean

Whether this app is invisible to users in My Apps and Office 365 Launcher. Enabling this will assign the HideApp tag. Defaults to false.

ApplicationOptionalClaims

AccessTokens List<Pulumi.AzureAD.Inputs.ApplicationOptionalClaimsAccessToken>

One or more access_token blocks as documented below.

IdTokens List<Pulumi.AzureAD.Inputs.ApplicationOptionalClaimsIdToken>

One or more id_token blocks as documented below.

Saml2Tokens List<Pulumi.AzureAD.Inputs.ApplicationOptionalClaimsSaml2Token>

One or more saml2_token blocks as documented below.

AccessTokens []ApplicationOptionalClaimsAccessToken

One or more access_token blocks as documented below.

IdTokens []ApplicationOptionalClaimsIdToken

One or more id_token blocks as documented below.

Saml2Tokens []ApplicationOptionalClaimsSaml2Token

One or more saml2_token blocks as documented below.

accessTokens List<ApplicationOptionalClaimsAccessToken>

One or more access_token blocks as documented below.

idTokens List<ApplicationOptionalClaimsIdToken>

One or more id_token blocks as documented below.

saml2Tokens List<ApplicationOptionalClaimsSaml2Token>

One or more saml2_token blocks as documented below.

accessTokens ApplicationOptionalClaimsAccessToken[]

One or more access_token blocks as documented below.

idTokens ApplicationOptionalClaimsIdToken[]

One or more id_token blocks as documented below.

saml2Tokens ApplicationOptionalClaimsSaml2Token[]

One or more saml2_token blocks as documented below.

access_tokens Sequence[ApplicationOptionalClaimsAccessToken]

One or more access_token blocks as documented below.

id_tokens Sequence[ApplicationOptionalClaimsIdToken]

One or more id_token blocks as documented below.

saml2_tokens Sequence[ApplicationOptionalClaimsSaml2Token]

One or more saml2_token blocks as documented below.

accessTokens List<Property Map>

One or more access_token blocks as documented below.

idTokens List<Property Map>

One or more id_token blocks as documented below.

saml2Tokens List<Property Map>

One or more saml2_token blocks as documented below.

ApplicationOptionalClaimsAccessToken

Name string

The name of the optional claim.

AdditionalProperties List<string>

List of additional properties of the claim. If a property exists in this list, it modifies the behaviour of the optional claim.

Essential bool

Whether the claim specified by the client is necessary to ensure a smooth authorization experience.

Source string

The source of the claim. If source is absent, the claim is a predefined optional claim. If source is user, the value of name is the extension property from the user object.

Name string

The name of the optional claim.

AdditionalProperties []string

List of additional properties of the claim. If a property exists in this list, it modifies the behaviour of the optional claim.

Essential bool

Whether the claim specified by the client is necessary to ensure a smooth authorization experience.

Source string

The source of the claim. If source is absent, the claim is a predefined optional claim. If source is user, the value of name is the extension property from the user object.

name String

The name of the optional claim.

additionalProperties List<String>

List of additional properties of the claim. If a property exists in this list, it modifies the behaviour of the optional claim.

essential Boolean

Whether the claim specified by the client is necessary to ensure a smooth authorization experience.

source String

The source of the claim. If source is absent, the claim is a predefined optional claim. If source is user, the value of name is the extension property from the user object.

name string

The name of the optional claim.

additionalProperties string[]

List of additional properties of the claim. If a property exists in this list, it modifies the behaviour of the optional claim.

essential boolean

Whether the claim specified by the client is necessary to ensure a smooth authorization experience.

source string

The source of the claim. If source is absent, the claim is a predefined optional claim. If source is user, the value of name is the extension property from the user object.

name str

The name of the optional claim.

additional_properties Sequence[str]

List of additional properties of the claim. If a property exists in this list, it modifies the behaviour of the optional claim.

essential bool

Whether the claim specified by the client is necessary to ensure a smooth authorization experience.

source str

The source of the claim. If source is absent, the claim is a predefined optional claim. If source is user, the value of name is the extension property from the user object.

name String

The name of the optional claim.

additionalProperties List<String>

List of additional properties of the claim. If a property exists in this list, it modifies the behaviour of the optional claim.

essential Boolean

Whether the claim specified by the client is necessary to ensure a smooth authorization experience.

source String

The source of the claim. If source is absent, the claim is a predefined optional claim. If source is user, the value of name is the extension property from the user object.

ApplicationOptionalClaimsIdToken

Name string

The name of the optional claim.

AdditionalProperties List<string>

List of additional properties of the claim. If a property exists in this list, it modifies the behaviour of the optional claim.

Essential bool

Whether the claim specified by the client is necessary to ensure a smooth authorization experience.

Source string

The source of the claim. If source is absent, the claim is a predefined optional claim. If source is user, the value of name is the extension property from the user object.

Name string

The name of the optional claim.

AdditionalProperties []string

List of additional properties of the claim. If a property exists in this list, it modifies the behaviour of the optional claim.

Essential bool

Whether the claim specified by the client is necessary to ensure a smooth authorization experience.

Source string

The source of the claim. If source is absent, the claim is a predefined optional claim. If source is user, the value of name is the extension property from the user object.

name String

The name of the optional claim.

additionalProperties List<String>

List of additional properties of the claim. If a property exists in this list, it modifies the behaviour of the optional claim.

essential Boolean

Whether the claim specified by the client is necessary to ensure a smooth authorization experience.

source String

The source of the claim. If source is absent, the claim is a predefined optional claim. If source is user, the value of name is the extension property from the user object.

name string

The name of the optional claim.

additionalProperties string[]

List of additional properties of the claim. If a property exists in this list, it modifies the behaviour of the optional claim.

essential boolean

Whether the claim specified by the client is necessary to ensure a smooth authorization experience.

source string

The source of the claim. If source is absent, the claim is a predefined optional claim. If source is user, the value of name is the extension property from the user object.

name str

The name of the optional claim.

additional_properties Sequence[str]

List of additional properties of the claim. If a property exists in this list, it modifies the behaviour of the optional claim.

essential bool

Whether the claim specified by the client is necessary to ensure a smooth authorization experience.

source str

The source of the claim. If source is absent, the claim is a predefined optional claim. If source is user, the value of name is the extension property from the user object.

name String

The name of the optional claim.

additionalProperties List<String>

List of additional properties of the claim. If a property exists in this list, it modifies the behaviour of the optional claim.

essential Boolean

Whether the claim specified by the client is necessary to ensure a smooth authorization experience.

source String

The source of the claim. If source is absent, the claim is a predefined optional claim. If source is user, the value of name is the extension property from the user object.

ApplicationOptionalClaimsSaml2Token

Name string

The name of the optional claim.

AdditionalProperties List<string>

List of additional properties of the claim. If a property exists in this list, it modifies the behaviour of the optional claim.

Essential bool

Whether the claim specified by the client is necessary to ensure a smooth authorization experience.

Source string

The source of the claim. If source is absent, the claim is a predefined optional claim. If source is user, the value of name is the extension property from the user object.

Name string

The name of the optional claim.

AdditionalProperties []string

List of additional properties of the claim. If a property exists in this list, it modifies the behaviour of the optional claim.

Essential bool

Whether the claim specified by the client is necessary to ensure a smooth authorization experience.

Source string

The source of the claim. If source is absent, the claim is a predefined optional claim. If source is user, the value of name is the extension property from the user object.

name String

The name of the optional claim.

additionalProperties List<String>

List of additional properties of the claim. If a property exists in this list, it modifies the behaviour of the optional claim.

essential Boolean

Whether the claim specified by the client is necessary to ensure a smooth authorization experience.

source String

The source of the claim. If source is absent, the claim is a predefined optional claim. If source is user, the value of name is the extension property from the user object.

name string

The name of the optional claim.

additionalProperties string[]

List of additional properties of the claim. If a property exists in this list, it modifies the behaviour of the optional claim.

essential boolean

Whether the claim specified by the client is necessary to ensure a smooth authorization experience.

source string

The source of the claim. If source is absent, the claim is a predefined optional claim. If source is user, the value of name is the extension property from the user object.

name str

The name of the optional claim.

additional_properties Sequence[str]

List of additional properties of the claim. If a property exists in this list, it modifies the behaviour of the optional claim.

essential bool

Whether the claim specified by the client is necessary to ensure a smooth authorization experience.

source str

The source of the claim. If source is absent, the claim is a predefined optional claim. If source is user, the value of name is the extension property from the user object.

name String

The name of the optional claim.

additionalProperties List<String>

List of additional properties of the claim. If a property exists in this list, it modifies the behaviour of the optional claim.

essential Boolean

Whether the claim specified by the client is necessary to ensure a smooth authorization experience.

source String

The source of the claim. If source is absent, the claim is a predefined optional claim. If source is user, the value of name is the extension property from the user object.

ApplicationPublicClient

RedirectUris List<string>

A set of URLs where user tokens are sent for sign-in, or the redirect URIs where OAuth 2.0 authorization codes and access tokens are sent. Must be a valid https or ms-appx-web URL.

RedirectUris []string

A set of URLs where user tokens are sent for sign-in, or the redirect URIs where OAuth 2.0 authorization codes and access tokens are sent. Must be a valid https or ms-appx-web URL.

redirectUris List<String>

A set of URLs where user tokens are sent for sign-in, or the redirect URIs where OAuth 2.0 authorization codes and access tokens are sent. Must be a valid https or ms-appx-web URL.

redirectUris string[]

A set of URLs where user tokens are sent for sign-in, or the redirect URIs where OAuth 2.0 authorization codes and access tokens are sent. Must be a valid https or ms-appx-web URL.

redirect_uris Sequence[str]

A set of URLs where user tokens are sent for sign-in, or the redirect URIs where OAuth 2.0 authorization codes and access tokens are sent. Must be a valid https or ms-appx-web URL.

redirectUris List<String>

A set of URLs where user tokens are sent for sign-in, or the redirect URIs where OAuth 2.0 authorization codes and access tokens are sent. Must be a valid https or ms-appx-web URL.

ApplicationRequiredResourceAccess

ResourceAccesses List<Pulumi.AzureAD.Inputs.ApplicationRequiredResourceAccessResourceAccess>

A collection of resource_access blocks as documented below, describing OAuth2.0 permission scopes and app roles that the application requires from the specified resource.

ResourceAppId string

The unique identifier for the resource that the application requires access to. This should be the Application ID of the target application.

Note: Documentation on resource_app_id values for Microsoft APIs can be difficult to find, but you can use the Azure CLI to find them. (e.g. az ad sp list --display-name "Microsoft Graph" --query '[].{appDisplayName:appDisplayName, appId:appId}')

ResourceAccesses []ApplicationRequiredResourceAccessResourceAccess

A collection of resource_access blocks as documented below, describing OAuth2.0 permission scopes and app roles that the application requires from the specified resource.

ResourceAppId string

The unique identifier for the resource that the application requires access to. This should be the Application ID of the target application.

Note: Documentation on resource_app_id values for Microsoft APIs can be difficult to find, but you can use the Azure CLI to find them. (e.g. az ad sp list --display-name "Microsoft Graph" --query '[].{appDisplayName:appDisplayName, appId:appId}')

resourceAccesses List<ApplicationRequiredResourceAccessResourceAccess>

A collection of resource_access blocks as documented below, describing OAuth2.0 permission scopes and app roles that the application requires from the specified resource.

resourceAppId String

The unique identifier for the resource that the application requires access to. This should be the Application ID of the target application.

Note: Documentation on resource_app_id values for Microsoft APIs can be difficult to find, but you can use the Azure CLI to find them. (e.g. az ad sp list --display-name "Microsoft Graph" --query '[].{appDisplayName:appDisplayName, appId:appId}')

resourceAccesses ApplicationRequiredResourceAccessResourceAccess[]

A collection of resource_access blocks as documented below, describing OAuth2.0 permission scopes and app roles that the application requires from the specified resource.

resourceAppId string

The unique identifier for the resource that the application requires access to. This should be the Application ID of the target application.

Note: Documentation on resource_app_id values for Microsoft APIs can be difficult to find, but you can use the Azure CLI to find them. (e.g. az ad sp list --display-name "Microsoft Graph" --query '[].{appDisplayName:appDisplayName, appId:appId}')

resource_accesses Sequence[ApplicationRequiredResourceAccessResourceAccess]

A collection of resource_access blocks as documented below, describing OAuth2.0 permission scopes and app roles that the application requires from the specified resource.

resource_app_id str

The unique identifier for the resource that the application requires access to. This should be the Application ID of the target application.

Note: Documentation on resource_app_id values for Microsoft APIs can be difficult to find, but you can use the Azure CLI to find them. (e.g. az ad sp list --display-name "Microsoft Graph" --query '[].{appDisplayName:appDisplayName, appId:appId}')

resourceAccesses List<Property Map>

A collection of resource_access blocks as documented below, describing OAuth2.0 permission scopes and app roles that the application requires from the specified resource.

resourceAppId String

The unique identifier for the resource that the application requires access to. This should be the Application ID of the target application.

Note: Documentation on resource_app_id values for Microsoft APIs can be difficult to find, but you can use the Azure CLI to find them. (e.g. az ad sp list --display-name "Microsoft Graph" --query '[].{appDisplayName:appDisplayName, appId:appId}')

ApplicationRequiredResourceAccessResourceAccess

Id string

The unique identifier for an app role or OAuth2 permission scope published by the resource application.

Type string

Specifies whether the id property references an app role or an OAuth2 permission scope. Possible values are Role or Scope.

Id string

The unique identifier for an app role or OAuth2 permission scope published by the resource application.

Type string

Specifies whether the id property references an app role or an OAuth2 permission scope. Possible values are Role or Scope.

id String

The unique identifier for an app role or OAuth2 permission scope published by the resource application.

type String

Specifies whether the id property references an app role or an OAuth2 permission scope. Possible values are Role or Scope.

id string

The unique identifier for an app role or OAuth2 permission scope published by the resource application.

type string

Specifies whether the id property references an app role or an OAuth2 permission scope. Possible values are Role or Scope.

id str

The unique identifier for an app role or OAuth2 permission scope published by the resource application.

type str

Specifies whether the id property references an app role or an OAuth2 permission scope. Possible values are Role or Scope.

id String

The unique identifier for an app role or OAuth2 permission scope published by the resource application.

type String

Specifies whether the id property references an app role or an OAuth2 permission scope. Possible values are Role or Scope.

ApplicationSinglePageApplication

RedirectUris List<string>

A set of URLs where user tokens are sent for sign-in, or the redirect URIs where OAuth 2.0 authorization codes and access tokens are sent. Must be a valid https URL.

RedirectUris []string

A set of URLs where user tokens are sent for sign-in, or the redirect URIs where OAuth 2.0 authorization codes and access tokens are sent. Must be a valid https URL.

redirectUris List<String>

A set of URLs where user tokens are sent for sign-in, or the redirect URIs where OAuth 2.0 authorization codes and access tokens are sent. Must be a valid https URL.

redirectUris string[]

A set of URLs where user tokens are sent for sign-in, or the redirect URIs where OAuth 2.0 authorization codes and access tokens are sent. Must be a valid https URL.

redirect_uris Sequence[str]

A set of URLs where user tokens are sent for sign-in, or the redirect URIs where OAuth 2.0 authorization codes and access tokens are sent. Must be a valid https URL.

redirectUris List<String>

A set of URLs where user tokens are sent for sign-in, or the redirect URIs where OAuth 2.0 authorization codes and access tokens are sent. Must be a valid https URL.

ApplicationWeb

HomepageUrl string

Home page or landing page of the application.

ImplicitGrant Pulumi.AzureAD.Inputs.ApplicationWebImplicitGrant

An implicit_grant block as documented above.

LogoutUrl string

The URL that will be used by Microsoft's authorization service to sign out a user using front-channel, back-channel or SAML logout protocols.

RedirectUris List<string>

A set of URLs where user tokens are sent for sign-in, or the redirect URIs where OAuth 2.0 authorization codes and access tokens are sent. Must be a valid http URL or a URN.

HomepageUrl string

Home page or landing page of the application.

ImplicitGrant ApplicationWebImplicitGrant

An implicit_grant block as documented above.

LogoutUrl string

The URL that will be used by Microsoft's authorization service to sign out a user using front-channel, back-channel or SAML logout protocols.

RedirectUris []string

A set of URLs where user tokens are sent for sign-in, or the redirect URIs where OAuth 2.0 authorization codes and access tokens are sent. Must be a valid http URL or a URN.

homepageUrl String

Home page or landing page of the application.

implicitGrant ApplicationWebImplicitGrant

An implicit_grant block as documented above.

logoutUrl String

The URL that will be used by Microsoft's authorization service to sign out a user using front-channel, back-channel or SAML logout protocols.

redirectUris List<String>

A set of URLs where user tokens are sent for sign-in, or the redirect URIs where OAuth 2.0 authorization codes and access tokens are sent. Must be a valid http URL or a URN.

homepageUrl string

Home page or landing page of the application.

implicitGrant ApplicationWebImplicitGrant

An implicit_grant block as documented above.

logoutUrl string

The URL that will be used by Microsoft's authorization service to sign out a user using front-channel, back-channel or SAML logout protocols.

redirectUris string[]

A set of URLs where user tokens are sent for sign-in, or the redirect URIs where OAuth 2.0 authorization codes and access tokens are sent. Must be a valid http URL or a URN.

homepage_url str

Home page or landing page of the application.

implicit_grant ApplicationWebImplicitGrant

An implicit_grant block as documented above.

logout_url str

The URL that will be used by Microsoft's authorization service to sign out a user using front-channel, back-channel or SAML logout protocols.

redirect_uris Sequence[str]

A set of URLs where user tokens are sent for sign-in, or the redirect URIs where OAuth 2.0 authorization codes and access tokens are sent. Must be a valid http URL or a URN.

homepageUrl String

Home page or landing page of the application.

implicitGrant Property Map

An implicit_grant block as documented above.

logoutUrl String

The URL that will be used by Microsoft's authorization service to sign out a user using front-channel, back-channel or SAML logout protocols.

redirectUris List<String>

A set of URLs where user tokens are sent for sign-in, or the redirect URIs where OAuth 2.0 authorization codes and access tokens are sent. Must be a valid http URL or a URN.

ApplicationWebImplicitGrant

AccessTokenIssuanceEnabled bool

Whether this web application can request an access token using OAuth 2.0 implicit flow.

IdTokenIssuanceEnabled bool

Whether this web application can request an ID token using OAuth 2.0 implicit flow.

AccessTokenIssuanceEnabled bool

Whether this web application can request an access token using OAuth 2.0 implicit flow.

IdTokenIssuanceEnabled bool

Whether this web application can request an ID token using OAuth 2.0 implicit flow.

accessTokenIssuanceEnabled Boolean

Whether this web application can request an access token using OAuth 2.0 implicit flow.

idTokenIssuanceEnabled Boolean

Whether this web application can request an ID token using OAuth 2.0 implicit flow.

accessTokenIssuanceEnabled boolean

Whether this web application can request an access token using OAuth 2.0 implicit flow.

idTokenIssuanceEnabled boolean

Whether this web application can request an ID token using OAuth 2.0 implicit flow.

access_token_issuance_enabled bool

Whether this web application can request an access token using OAuth 2.0 implicit flow.

id_token_issuance_enabled bool

Whether this web application can request an ID token using OAuth 2.0 implicit flow.

accessTokenIssuanceEnabled Boolean

Whether this web application can request an access token using OAuth 2.0 implicit flow.

idTokenIssuanceEnabled Boolean

Whether this web application can request an ID token using OAuth 2.0 implicit flow.

Package Details

Repository
Azure Active Directory (Azure AD) pulumi/pulumi-azuread
License
Apache-2.0
Notes

This Pulumi package is based on the azuread Terraform Provider.