Azure Active Directory (Azure AD) v5.42.0, Sep 22 23

Azure Active Directory (Azure AD) v5.42.0 published on Friday, Sep 22, 2023 by Pulumi

azuread.Application

Explore with Pulumi AI

Azure Active Directory (Azure AD) v5.42.0 published on Friday, Sep 22, 2023 by Pulumi

pulumi/pulumi-azuread

Import

Applications can be imported using their object ID, e.g.

 $ pulumi import azuread:index/application:Application test 00000000-0000-0000-0000-000000000000

Example Usage

Create an application

using System;
using System.Collections.Generic;
using System.IO;
using System.Linq;
using Pulumi;
using AzureAD = Pulumi.AzureAD;

	private static string ReadFileBase64(string path) {
		return Convert.ToBase64String(System.Text.Encoding.UTF8.GetBytes(File.ReadAllText(path)));
	}

return await Deployment.RunAsync(() => 
{
    var current = AzureAD.GetClientConfig.Invoke();

    var example = new AzureAD.Application("example", new()
    {
        DisplayName = "example",
        IdentifierUris = new[]
        {
            "api://example-app",
        },
        LogoImage = ReadFileBase64("/path/to/logo.png"),
        Owners = new[]
        {
            current.Apply(getClientConfigResult => getClientConfigResult.ObjectId),
        },
        SignInAudience = "AzureADMultipleOrgs",
        Api = new AzureAD.Inputs.ApplicationApiArgs
        {
            MappedClaimsEnabled = true,
            RequestedAccessTokenVersion = 2,
            KnownClientApplications = new[]
            {
                azuread_application.Known1.Application_id,
                azuread_application.Known2.Application_id,
            },
            Oauth2PermissionScopes = new[]
            {
                new AzureAD.Inputs.ApplicationApiOauth2PermissionScopeArgs
                {
                    AdminConsentDescription = "Allow the application to access example on behalf of the signed-in user.",
                    AdminConsentDisplayName = "Access example",
                    Enabled = true,
                    Id = "96183846-204b-4b43-82e1-5d2222eb4b9b",
                    Type = "User",
                    UserConsentDescription = "Allow the application to access example on your behalf.",
                    UserConsentDisplayName = "Access example",
                    Value = "user_impersonation",
                },
                new AzureAD.Inputs.ApplicationApiOauth2PermissionScopeArgs
                {
                    AdminConsentDescription = "Administer the example application",
                    AdminConsentDisplayName = "Administer",
                    Enabled = true,
                    Id = "be98fa3e-ab5b-4b11-83d9-04ba2b7946bc",
                    Type = "Admin",
                    Value = "administer",
                },
            },
        },
        AppRoles = new[]
        {
            new AzureAD.Inputs.ApplicationAppRoleArgs
            {
                AllowedMemberTypes = new[]
                {
                    "User",
                    "Application",
                },
                Description = "Admins can manage roles and perform all task actions",
                DisplayName = "Admin",
                Enabled = true,
                Id = "1b19509b-32b1-4e9f-b71d-4992aa991967",
                Value = "admin",
            },
            new AzureAD.Inputs.ApplicationAppRoleArgs
            {
                AllowedMemberTypes = new[]
                {
                    "User",
                },
                Description = "ReadOnly roles have limited query access",
                DisplayName = "ReadOnly",
                Enabled = true,
                Id = "497406e4-012a-4267-bf18-45a1cb148a01",
                Value = "User",
            },
        },
        FeatureTags = new[]
        {
            new AzureAD.Inputs.ApplicationFeatureTagArgs
            {
                Enterprise = true,
                Gallery = true,
            },
        },
        OptionalClaims = new AzureAD.Inputs.ApplicationOptionalClaimsArgs
        {
            AccessTokens = new[]
            {
                new AzureAD.Inputs.ApplicationOptionalClaimsAccessTokenArgs
                {
                    Name = "myclaim",
                },
                new AzureAD.Inputs.ApplicationOptionalClaimsAccessTokenArgs
                {
                    Name = "otherclaim",
                },
            },
            IdTokens = new[]
            {
                new AzureAD.Inputs.ApplicationOptionalClaimsIdTokenArgs
                {
                    Name = "userclaim",
                    Source = "user",
                    Essential = true,
                    AdditionalProperties = new[]
                    {
                        "emit_as_roles",
                    },
                },
            },
            Saml2Tokens = new[]
            {
                new AzureAD.Inputs.ApplicationOptionalClaimsSaml2TokenArgs
                {
                    Name = "samlexample",
                },
            },
        },
        RequiredResourceAccesses = new[]
        {
            new AzureAD.Inputs.ApplicationRequiredResourceAccessArgs
            {
                ResourceAppId = "00000003-0000-0000-c000-000000000000",
                ResourceAccesses = new[]
                {
                    new AzureAD.Inputs.ApplicationRequiredResourceAccessResourceAccessArgs
                    {
                        Id = "df021288-bdef-4463-88db-98f22de89214",
                        Type = "Role",
                    },
                    new AzureAD.Inputs.ApplicationRequiredResourceAccessResourceAccessArgs
                    {
                        Id = "b4e74841-8e56-480b-be8b-910348b18b4c",
                        Type = "Scope",
                    },
                },
            },
            new AzureAD.Inputs.ApplicationRequiredResourceAccessArgs
            {
                ResourceAppId = "c5393580-f805-4401-95e8-94b7a6ef2fc2",
                ResourceAccesses = new[]
                {
                    new AzureAD.Inputs.ApplicationRequiredResourceAccessResourceAccessArgs
                    {
                        Id = "594c1fb6-4f81-4475-ae41-0c394909246c",
                        Type = "Role",
                    },
                },
            },
        },
        Web = new AzureAD.Inputs.ApplicationWebArgs
        {
            HomepageUrl = "https://app.example.net",
            LogoutUrl = "https://app.example.net/logout",
            RedirectUris = new[]
            {
                "https://app.example.net/account",
            },
            ImplicitGrant = new AzureAD.Inputs.ApplicationWebImplicitGrantArgs
            {
                AccessTokenIssuanceEnabled = true,
                IdTokenIssuanceEnabled = true,
            },
        },
    });

});

package main

import (
	"encoding/base64"
	"os"

	"github.com/pulumi/pulumi-azuread/sdk/v5/go/azuread"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func filebase64OrPanic(path string) pulumi.StringPtrInput {
	if fileData, err := os.ReadFile(path); err == nil {
		return pulumi.String(base64.StdEncoding.EncodeToString(fileData[:]))
	} else {
		panic(err.Error())
	}
}

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		current, err := azuread.GetClientConfig(ctx, nil, nil)
		if err != nil {
			return err
		}
		_, err = azuread.NewApplication(ctx, "example", &azuread.ApplicationArgs{
			DisplayName: pulumi.String("example"),
			IdentifierUris: pulumi.StringArray{
				pulumi.String("api://example-app"),
			},
			LogoImage: filebase64OrPanic("/path/to/logo.png"),
			Owners: pulumi.StringArray{
				*pulumi.String(current.ObjectId),
			},
			SignInAudience: pulumi.String("AzureADMultipleOrgs"),
			Api: &azuread.ApplicationApiArgs{
				MappedClaimsEnabled:         pulumi.Bool(true),
				RequestedAccessTokenVersion: pulumi.Int(2),
				KnownClientApplications: pulumi.StringArray{
					azuread_application.Known1.Application_id,
					azuread_application.Known2.Application_id,
				},
				Oauth2PermissionScopes: azuread.ApplicationApiOauth2PermissionScopeArray{
					&azuread.ApplicationApiOauth2PermissionScopeArgs{
						AdminConsentDescription: pulumi.String("Allow the application to access example on behalf of the signed-in user."),
						AdminConsentDisplayName: pulumi.String("Access example"),
						Enabled:                 pulumi.Bool(true),
						Id:                      pulumi.String("96183846-204b-4b43-82e1-5d2222eb4b9b"),
						Type:                    pulumi.String("User"),
						UserConsentDescription:  pulumi.String("Allow the application to access example on your behalf."),
						UserConsentDisplayName:  pulumi.String("Access example"),
						Value:                   pulumi.String("user_impersonation"),
					},
					&azuread.ApplicationApiOauth2PermissionScopeArgs{
						AdminConsentDescription: pulumi.String("Administer the example application"),
						AdminConsentDisplayName: pulumi.String("Administer"),
						Enabled:                 pulumi.Bool(true),
						Id:                      pulumi.String("be98fa3e-ab5b-4b11-83d9-04ba2b7946bc"),
						Type:                    pulumi.String("Admin"),
						Value:                   pulumi.String("administer"),
					},
				},
			},
			AppRoles: azuread.ApplicationAppRoleArray{
				&azuread.ApplicationAppRoleArgs{
					AllowedMemberTypes: pulumi.StringArray{
						pulumi.String("User"),
						pulumi.String("Application"),
					},
					Description: pulumi.String("Admins can manage roles and perform all task actions"),
					DisplayName: pulumi.String("Admin"),
					Enabled:     pulumi.Bool(true),
					Id:          pulumi.String("1b19509b-32b1-4e9f-b71d-4992aa991967"),
					Value:       pulumi.String("admin"),
				},
				&azuread.ApplicationAppRoleArgs{
					AllowedMemberTypes: pulumi.StringArray{
						pulumi.String("User"),
					},
					Description: pulumi.String("ReadOnly roles have limited query access"),
					DisplayName: pulumi.String("ReadOnly"),
					Enabled:     pulumi.Bool(true),
					Id:          pulumi.String("497406e4-012a-4267-bf18-45a1cb148a01"),
					Value:       pulumi.String("User"),
				},
			},
			FeatureTags: azuread.ApplicationFeatureTagArray{
				&azuread.ApplicationFeatureTagArgs{
					Enterprise: pulumi.Bool(true),
					Gallery:    pulumi.Bool(true),
				},
			},
			OptionalClaims: &azuread.ApplicationOptionalClaimsArgs{
				AccessTokens: azuread.ApplicationOptionalClaimsAccessTokenArray{
					&azuread.ApplicationOptionalClaimsAccessTokenArgs{
						Name: pulumi.String("myclaim"),
					},
					&azuread.ApplicationOptionalClaimsAccessTokenArgs{
						Name: pulumi.String("otherclaim"),
					},
				},
				IdTokens: azuread.ApplicationOptionalClaimsIdTokenArray{
					&azuread.ApplicationOptionalClaimsIdTokenArgs{
						Name:      pulumi.String("userclaim"),
						Source:    pulumi.String("user"),
						Essential: pulumi.Bool(true),
						AdditionalProperties: pulumi.StringArray{
							pulumi.String("emit_as_roles"),
						},
					},
				},
				Saml2Tokens: azuread.ApplicationOptionalClaimsSaml2TokenArray{
					&azuread.ApplicationOptionalClaimsSaml2TokenArgs{
						Name: pulumi.String("samlexample"),
					},
				},
			},
			RequiredResourceAccesses: azuread.ApplicationRequiredResourceAccessArray{
				&azuread.ApplicationRequiredResourceAccessArgs{
					ResourceAppId: pulumi.String("00000003-0000-0000-c000-000000000000"),
					ResourceAccesses: azuread.ApplicationRequiredResourceAccessResourceAccessArray{
						&azuread.ApplicationRequiredResourceAccessResourceAccessArgs{
							Id:   pulumi.String("df021288-bdef-4463-88db-98f22de89214"),
							Type: pulumi.String("Role"),
						},
						&azuread.ApplicationRequiredResourceAccessResourceAccessArgs{
							Id:   pulumi.String("b4e74841-8e56-480b-be8b-910348b18b4c"),
							Type: pulumi.String("Scope"),
						},
					},
				},
				&azuread.ApplicationRequiredResourceAccessArgs{
					ResourceAppId: pulumi.String("c5393580-f805-4401-95e8-94b7a6ef2fc2"),
					ResourceAccesses: azuread.ApplicationRequiredResourceAccessResourceAccessArray{
						&azuread.ApplicationRequiredResourceAccessResourceAccessArgs{
							Id:   pulumi.String("594c1fb6-4f81-4475-ae41-0c394909246c"),
							Type: pulumi.String("Role"),
						},
					},
				},
			},
			Web: &azuread.ApplicationWebArgs{
				HomepageUrl: pulumi.String("https://app.example.net"),
				LogoutUrl:   pulumi.String("https://app.example.net/logout"),
				RedirectUris: pulumi.StringArray{
					pulumi.String("https://app.example.net/account"),
				},
				ImplicitGrant: &azuread.ApplicationWebImplicitGrantArgs{
					AccessTokenIssuanceEnabled: pulumi.Bool(true),
					IdTokenIssuanceEnabled:     pulumi.Bool(true),
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azuread.AzureadFunctions;
import com.pulumi.azuread.Application;
import com.pulumi.azuread.ApplicationArgs;
import com.pulumi.azuread.inputs.ApplicationApiArgs;
import com.pulumi.azuread.inputs.ApplicationAppRoleArgs;
import com.pulumi.azuread.inputs.ApplicationFeatureTagArgs;
import com.pulumi.azuread.inputs.ApplicationOptionalClaimsArgs;
import com.pulumi.azuread.inputs.ApplicationRequiredResourceAccessArgs;
import com.pulumi.azuread.inputs.ApplicationWebArgs;
import com.pulumi.azuread.inputs.ApplicationWebImplicitGrantArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        final var current = AzureadFunctions.getClientConfig();

        var example = new Application("example", ApplicationArgs.builder()        
            .displayName("example")
            .identifierUris("api://example-app")
            .logoImage(Base64.getEncoder().encodeToString(Files.readAllBytes(Paths.get("/path/to/logo.png"))))
            .owners(current.applyValue(getClientConfigResult -> getClientConfigResult.objectId()))
            .signInAudience("AzureADMultipleOrgs")
            .api(ApplicationApiArgs.builder()
                .mappedClaimsEnabled(true)
                .requestedAccessTokenVersion(2)
                .knownClientApplications(                
                    azuread_application.known1().application_id(),
                    azuread_application.known2().application_id())
                .oauth2PermissionScopes(                
                    ApplicationApiOauth2PermissionScopeArgs.builder()
                        .adminConsentDescription("Allow the application to access example on behalf of the signed-in user.")
                        .adminConsentDisplayName("Access example")
                        .enabled(true)
                        .id("96183846-204b-4b43-82e1-5d2222eb4b9b")
                        .type("User")
                        .userConsentDescription("Allow the application to access example on your behalf.")
                        .userConsentDisplayName("Access example")
                        .value("user_impersonation")
                        .build(),
                    ApplicationApiOauth2PermissionScopeArgs.builder()
                        .adminConsentDescription("Administer the example application")
                        .adminConsentDisplayName("Administer")
                        .enabled(true)
                        .id("be98fa3e-ab5b-4b11-83d9-04ba2b7946bc")
                        .type("Admin")
                        .value("administer")
                        .build())
                .build())
            .appRoles(            
                ApplicationAppRoleArgs.builder()
                    .allowedMemberTypes(                    
                        "User",
                        "Application")
                    .description("Admins can manage roles and perform all task actions")
                    .displayName("Admin")
                    .enabled(true)
                    .id("1b19509b-32b1-4e9f-b71d-4992aa991967")
                    .value("admin")
                    .build(),
                ApplicationAppRoleArgs.builder()
                    .allowedMemberTypes("User")
                    .description("ReadOnly roles have limited query access")
                    .displayName("ReadOnly")
                    .enabled(true)
                    .id("497406e4-012a-4267-bf18-45a1cb148a01")
                    .value("User")
                    .build())
            .featureTags(ApplicationFeatureTagArgs.builder()
                .enterprise(true)
                .gallery(true)
                .build())
            .optionalClaims(ApplicationOptionalClaimsArgs.builder()
                .accessTokens(                
                    ApplicationOptionalClaimsAccessTokenArgs.builder()
                        .name("myclaim")
                        .build(),
                    ApplicationOptionalClaimsAccessTokenArgs.builder()
                        .name("otherclaim")
                        .build())
                .idTokens(ApplicationOptionalClaimsIdTokenArgs.builder()
                    .name("userclaim")
                    .source("user")
                    .essential(true)
                    .additionalProperties("emit_as_roles")
                    .build())
                .saml2Tokens(ApplicationOptionalClaimsSaml2TokenArgs.builder()
                    .name("samlexample")
                    .build())
                .build())
            .requiredResourceAccesses(            
                ApplicationRequiredResourceAccessArgs.builder()
                    .resourceAppId("00000003-0000-0000-c000-000000000000")
                    .resourceAccesses(                    
                        ApplicationRequiredResourceAccessResourceAccessArgs.builder()
                            .id("df021288-bdef-4463-88db-98f22de89214")
                            .type("Role")
                            .build(),
                        ApplicationRequiredResourceAccessResourceAccessArgs.builder()
                            .id("b4e74841-8e56-480b-be8b-910348b18b4c")
                            .type("Scope")
                            .build())
                    .build(),
                ApplicationRequiredResourceAccessArgs.builder()
                    .resourceAppId("c5393580-f805-4401-95e8-94b7a6ef2fc2")
                    .resourceAccesses(ApplicationRequiredResourceAccessResourceAccessArgs.builder()
                        .id("594c1fb6-4f81-4475-ae41-0c394909246c")
                        .type("Role")
                        .build())
                    .build())
            .web(ApplicationWebArgs.builder()
                .homepageUrl("https://app.example.net")
                .logoutUrl("https://app.example.net/logout")
                .redirectUris("https://app.example.net/account")
                .implicitGrant(ApplicationWebImplicitGrantArgs.builder()
                    .accessTokenIssuanceEnabled(true)
                    .idTokenIssuanceEnabled(true)
                    .build())
                .build())
            .build());

    }
}

import pulumi
import base64
import pulumi_azuread as azuread

current = azuread.get_client_config()
example = azuread.Application("example",
    display_name="example",
    identifier_uris=["api://example-app"],
    logo_image=(lambda path: base64.b64encode(open(path).read().encode()).decode())("/path/to/logo.png"),
    owners=[current.object_id],
    sign_in_audience="AzureADMultipleOrgs",
    api=azuread.ApplicationApiArgs(
        mapped_claims_enabled=True,
        requested_access_token_version=2,
        known_client_applications=[
            azuread_application["known1"]["application_id"],
            azuread_application["known2"]["application_id"],
        ],
        oauth2_permission_scopes=[
            azuread.ApplicationApiOauth2PermissionScopeArgs(
                admin_consent_description="Allow the application to access example on behalf of the signed-in user.",
                admin_consent_display_name="Access example",
                enabled=True,
                id="96183846-204b-4b43-82e1-5d2222eb4b9b",
                type="User",
                user_consent_description="Allow the application to access example on your behalf.",
                user_consent_display_name="Access example",
                value="user_impersonation",
            ),
            azuread.ApplicationApiOauth2PermissionScopeArgs(
                admin_consent_description="Administer the example application",
                admin_consent_display_name="Administer",
                enabled=True,
                id="be98fa3e-ab5b-4b11-83d9-04ba2b7946bc",
                type="Admin",
                value="administer",
            ),
        ],
    ),
    app_roles=[
        azuread.ApplicationAppRoleArgs(
            allowed_member_types=[
                "User",
                "Application",
            ],
            description="Admins can manage roles and perform all task actions",
            display_name="Admin",
            enabled=True,
            id="1b19509b-32b1-4e9f-b71d-4992aa991967",
            value="admin",
        ),
        azuread.ApplicationAppRoleArgs(
            allowed_member_types=["User"],
            description="ReadOnly roles have limited query access",
            display_name="ReadOnly",
            enabled=True,
            id="497406e4-012a-4267-bf18-45a1cb148a01",
            value="User",
        ),
    ],
    feature_tags=[azuread.ApplicationFeatureTagArgs(
        enterprise=True,
        gallery=True,
    )],
    optional_claims=azuread.ApplicationOptionalClaimsArgs(
        access_tokens=[
            azuread.ApplicationOptionalClaimsAccessTokenArgs(
                name="myclaim",
            ),
            azuread.ApplicationOptionalClaimsAccessTokenArgs(
                name="otherclaim",
            ),
        ],
        id_tokens=[azuread.ApplicationOptionalClaimsIdTokenArgs(
            name="userclaim",
            source="user",
            essential=True,
            additional_properties=["emit_as_roles"],
        )],
        saml2_tokens=[azuread.ApplicationOptionalClaimsSaml2TokenArgs(
            name="samlexample",
        )],
    ),
    required_resource_accesses=[
        azuread.ApplicationRequiredResourceAccessArgs(
            resource_app_id="00000003-0000-0000-c000-000000000000",
            resource_accesses=[
                azuread.ApplicationRequiredResourceAccessResourceAccessArgs(
                    id="df021288-bdef-4463-88db-98f22de89214",
                    type="Role",
                ),
                azuread.ApplicationRequiredResourceAccessResourceAccessArgs(
                    id="b4e74841-8e56-480b-be8b-910348b18b4c",
                    type="Scope",
                ),
            ],
        ),
        azuread.ApplicationRequiredResourceAccessArgs(
            resource_app_id="c5393580-f805-4401-95e8-94b7a6ef2fc2",
            resource_accesses=[azuread.ApplicationRequiredResourceAccessResourceAccessArgs(
                id="594c1fb6-4f81-4475-ae41-0c394909246c",
                type="Role",
            )],
        ),
    ],
    web=azuread.ApplicationWebArgs(
        homepage_url="https://app.example.net",
        logout_url="https://app.example.net/logout",
        redirect_uris=["https://app.example.net/account"],
        implicit_grant=azuread.ApplicationWebImplicitGrantArgs(
            access_token_issuance_enabled=True,
            id_token_issuance_enabled=True,
        ),
    ))

import * as pulumi from "@pulumi/pulumi";
import * as azuread from "@pulumi/azuread";
import * as fs from "fs";

const current = azuread.getClientConfig({});
const example = new azuread.Application("example", {
    displayName: "example",
    identifierUris: ["api://example-app"],
    logoImage: Buffer.from(fs.readFileSync("/path/to/logo.png"), 'binary').toString('base64'),
    owners: [current.then(current => current.objectId)],
    signInAudience: "AzureADMultipleOrgs",
    api: {
        mappedClaimsEnabled: true,
        requestedAccessTokenVersion: 2,
        knownClientApplications: [
            azuread_application.known1.application_id,
            azuread_application.known2.application_id,
        ],
        oauth2PermissionScopes: [
            {
                adminConsentDescription: "Allow the application to access example on behalf of the signed-in user.",
                adminConsentDisplayName: "Access example",
                enabled: true,
                id: "96183846-204b-4b43-82e1-5d2222eb4b9b",
                type: "User",
                userConsentDescription: "Allow the application to access example on your behalf.",
                userConsentDisplayName: "Access example",
                value: "user_impersonation",
            },
            {
                adminConsentDescription: "Administer the example application",
                adminConsentDisplayName: "Administer",
                enabled: true,
                id: "be98fa3e-ab5b-4b11-83d9-04ba2b7946bc",
                type: "Admin",
                value: "administer",
            },
        ],
    },
    appRoles: [
        {
            allowedMemberTypes: [
                "User",
                "Application",
            ],
            description: "Admins can manage roles and perform all task actions",
            displayName: "Admin",
            enabled: true,
            id: "1b19509b-32b1-4e9f-b71d-4992aa991967",
            value: "admin",
        },
        {
            allowedMemberTypes: ["User"],
            description: "ReadOnly roles have limited query access",
            displayName: "ReadOnly",
            enabled: true,
            id: "497406e4-012a-4267-bf18-45a1cb148a01",
            value: "User",
        },
    ],
    featureTags: [{
        enterprise: true,
        gallery: true,
    }],
    optionalClaims: {
        accessTokens: [
            {
                name: "myclaim",
            },
            {
                name: "otherclaim",
            },
        ],
        idTokens: [{
            name: "userclaim",
            source: "user",
            essential: true,
            additionalProperties: ["emit_as_roles"],
        }],
        saml2Tokens: [{
            name: "samlexample",
        }],
    },
    requiredResourceAccesses: [
        {
            resourceAppId: "00000003-0000-0000-c000-000000000000",
            resourceAccesses: [
                {
                    id: "df021288-bdef-4463-88db-98f22de89214",
                    type: "Role",
                },
                {
                    id: "b4e74841-8e56-480b-be8b-910348b18b4c",
                    type: "Scope",
                },
            ],
        },
        {
            resourceAppId: "c5393580-f805-4401-95e8-94b7a6ef2fc2",
            resourceAccesses: [{
                id: "594c1fb6-4f81-4475-ae41-0c394909246c",
                type: "Role",
            }],
        },
    ],
    web: {
        homepageUrl: "https://app.example.net",
        logoutUrl: "https://app.example.net/logout",
        redirectUris: ["https://app.example.net/account"],
        implicitGrant: {
            accessTokenIssuanceEnabled: true,
            idTokenIssuanceEnabled: true,
        },
    },
});

Coming soon!

Create application from a gallery template

using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AzureAD = Pulumi.AzureAD;

return await Deployment.RunAsync(() => 
{
    var exampleApplicationTemplate = AzureAD.GetApplicationTemplate.Invoke(new()
    {
        DisplayName = "Marketo",
    });

    var exampleApplication = new AzureAD.Application("exampleApplication", new()
    {
        DisplayName = "example",
        TemplateId = exampleApplicationTemplate.Apply(getApplicationTemplateResult => getApplicationTemplateResult.TemplateId),
    });

    var exampleServicePrincipal = new AzureAD.ServicePrincipal("exampleServicePrincipal", new()
    {
        ApplicationId = exampleApplication.ApplicationId,
        UseExisting = true,
    });

});

package main

import (
	"github.com/pulumi/pulumi-azuread/sdk/v5/go/azuread"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		exampleApplicationTemplate, err := azuread.GetApplicationTemplate(ctx, &azuread.GetApplicationTemplateArgs{
			DisplayName: pulumi.StringRef("Marketo"),
		}, nil)
		if err != nil {
			return err
		}
		exampleApplication, err := azuread.NewApplication(ctx, "exampleApplication", &azuread.ApplicationArgs{
			DisplayName: pulumi.String("example"),
			TemplateId:  *pulumi.String(exampleApplicationTemplate.TemplateId),
		})
		if err != nil {
			return err
		}
		_, err = azuread.NewServicePrincipal(ctx, "exampleServicePrincipal", &azuread.ServicePrincipalArgs{
			ApplicationId: exampleApplication.ApplicationId,
			UseExisting:   pulumi.Bool(true),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azuread.AzureadFunctions;
import com.pulumi.azuread.inputs.GetApplicationTemplateArgs;
import com.pulumi.azuread.Application;
import com.pulumi.azuread.ApplicationArgs;
import com.pulumi.azuread.ServicePrincipal;
import com.pulumi.azuread.ServicePrincipalArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        final var exampleApplicationTemplate = AzureadFunctions.getApplicationTemplate(GetApplicationTemplateArgs.builder()
            .displayName("Marketo")
            .build());

        var exampleApplication = new Application("exampleApplication", ApplicationArgs.builder()        
            .displayName("example")
            .templateId(exampleApplicationTemplate.applyValue(getApplicationTemplateResult -> getApplicationTemplateResult.templateId()))
            .build());

        var exampleServicePrincipal = new ServicePrincipal("exampleServicePrincipal", ServicePrincipalArgs.builder()        
            .applicationId(exampleApplication.applicationId())
            .useExisting(true)
            .build());

    }
}

import pulumi
import pulumi_azuread as azuread

example_application_template = azuread.get_application_template(display_name="Marketo")
example_application = azuread.Application("exampleApplication",
    display_name="example",
    template_id=example_application_template.template_id)
example_service_principal = azuread.ServicePrincipal("exampleServicePrincipal",
    application_id=example_application.application_id,
    use_existing=True)

import * as pulumi from "@pulumi/pulumi";
import * as azuread from "@pulumi/azuread";

const exampleApplicationTemplate = azuread.getApplicationTemplate({
    displayName: "Marketo",
});
const exampleApplication = new azuread.Application("exampleApplication", {
    displayName: "example",
    templateId: exampleApplicationTemplate.then(exampleApplicationTemplate => exampleApplicationTemplate.templateId),
});
const exampleServicePrincipal = new azuread.ServicePrincipal("exampleServicePrincipal", {
    applicationId: exampleApplication.applicationId,
    useExisting: true,
});

resources:
  exampleApplication:
    type: azuread:Application
    properties:
      displayName: example
      templateId: ${exampleApplicationTemplate.templateId}
  exampleServicePrincipal:
    type: azuread:ServicePrincipal
    properties:
      applicationId: ${exampleApplication.applicationId}
      useExisting: true
variables:
  exampleApplicationTemplate:
    fn::invoke:
      Function: azuread:getApplicationTemplate
      Arguments:
        displayName: Marketo

Create Application Resource

new Application(name: string, args: ApplicationArgs, opts?: CustomResourceOptions);

@overload
def Application(resource_name: str,
                opts: Optional[ResourceOptions] = None,
                api: Optional[ApplicationApiArgs] = None,
                app_roles: Optional[Sequence[ApplicationAppRoleArgs]] = None,
                description: Optional[str] = None,
                device_only_auth_enabled: Optional[bool] = None,
                display_name: Optional[str] = None,
                fallback_public_client_enabled: Optional[bool] = None,
                feature_tags: Optional[Sequence[ApplicationFeatureTagArgs]] = None,
                group_membership_claims: Optional[Sequence[str]] = None,
                identifier_uris: Optional[Sequence[str]] = None,
                logo_image: Optional[str] = None,
                marketing_url: Optional[str] = None,
                notes: Optional[str] = None,
                oauth2_post_response_required: Optional[bool] = None,
                optional_claims: Optional[ApplicationOptionalClaimsArgs] = None,
                owners: Optional[Sequence[str]] = None,
                prevent_duplicate_names: Optional[bool] = None,
                privacy_statement_url: Optional[str] = None,
                public_client: Optional[ApplicationPublicClientArgs] = None,
                required_resource_accesses: Optional[Sequence[ApplicationRequiredResourceAccessArgs]] = None,
                service_management_reference: Optional[str] = None,
                sign_in_audience: Optional[str] = None,
                single_page_application: Optional[ApplicationSinglePageApplicationArgs] = None,
                support_url: Optional[str] = None,
                tags: Optional[Sequence[str]] = None,
                template_id: Optional[str] = None,
                terms_of_service_url: Optional[str] = None,
                web: Optional[ApplicationWebArgs] = None)
@overload
def Application(resource_name: str,
                args: ApplicationArgs,
                opts: Optional[ResourceOptions] = None)

func NewApplication(ctx *Context, name string, args ApplicationArgs, opts ...ResourceOption) (*Application, error)

public Application(string name, ApplicationArgs args, CustomResourceOptions? opts = null)

public Application(String name, ApplicationArgs args)
public Application(String name, ApplicationArgs args, CustomResourceOptions options)

type: azuread:Application
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

name string: The unique name of the resource.
args ApplicationArgs: The arguments to resource properties.
opts CustomResourceOptions: Bag of options to control resource's behavior.

resource_name str: The unique name of the resource.
args ApplicationArgs: The arguments to resource properties.
opts ResourceOptions: Bag of options to control resource's behavior.

ctx Context: Context object for the current deployment.
name string: The unique name of the resource.
args ApplicationArgs: The arguments to resource properties.
opts ResourceOption: Bag of options to control resource's behavior.

name string: The unique name of the resource.
args ApplicationArgs: The arguments to resource properties.
opts CustomResourceOptions: Bag of options to control resource's behavior.

name String: The unique name of the resource.
args ApplicationArgs: The arguments to resource properties.
options CustomResourceOptions: Bag of options to control resource's behavior.

Application Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

The Application resource accepts the following input properties:

DisplayName string: The display name for the application.
Api Pulumi.AzureAD.Inputs.ApplicationApi: An api block as documented below, which configures API related settings for this application.
AppRoles List<Pulumi.AzureAD.Inputs.ApplicationAppRole>: A collection of app_role blocks as documented below. For more information see official documentation on Application Roles.
Description string: A description of the application, as shown to end users.
DeviceOnlyAuthEnabled bool: Specifies whether this application supports device authentication without a user. Defaults to false.
FallbackPublicClientEnabled bool: Specifies whether the application is a public client. Appropriate for apps using token grant flows that don't use a redirect URI. Defaults to false.
FeatureTags List<Pulumi.AzureAD.Inputs.ApplicationFeatureTag>: A feature_tags block as described below. Cannot be used together with the tags property.
Features and Tags Features are configured for an application using tags, and are provided as a shortcut to set the corresponding magic tag value for each feature. You cannot configure feature_tags and tags for an application at the same time, so if you need to assign additional custom tags it's recommended to use the tags property instead. Tag values also propagate to any linked service principals.
GroupMembershipClaims List<string>: Configures the groups claim issued in a user or OAuth 2.0 access token that the app expects. Possible values are None, SecurityGroup, DirectoryRole, ApplicationGroup or All.
IdentifierUris List<string>: A set of user-defined URI(s) that uniquely identify an application within its Azure AD tenant, or within a verified custom domain if the application is multi-tenant.
LogoImage string: A logo image to upload for the application, as a raw base64-encoded string. The image should be in gif, jpeg or png format. Note that once an image has been uploaded, it is not possible to remove it without replacing it with another image.
MarketingUrl string: URL of the application's marketing page.
Notes string: User-specified notes relevant for the management of the application.
Oauth2PostResponseRequired bool: Specifies whether, as part of OAuth 2.0 token requests, Azure AD allows POST requests, as opposed to GET requests. Defaults to false, which specifies that only GET requests are allowed.
OptionalClaims Pulumi.AzureAD.Inputs.ApplicationOptionalClaims: An optional_claims block as documented below.
Owners List<string>: A list of object IDs of principals that will be granted ownership of the application
PreventDuplicateNames bool: If true, will return an error if an existing application is found with the same name. Defaults to false.
PrivacyStatementUrl string: URL of the application's privacy statement.
PublicClient Pulumi.AzureAD.Inputs.ApplicationPublicClient: A public_client block as documented below, which configures non-web app or non-web API application settings, for example mobile or other public clients such as an installed application running on a desktop device.
RequiredResourceAccesses List<Pulumi.AzureAD.Inputs.ApplicationRequiredResourceAccess>: A collection of required_resource_access blocks as documented below.
ServiceManagementReference string: References application context information from a Service or Asset Management database.
SignInAudience string: The Microsoft account types that are supported for the current application. Must be one of AzureADMyOrg, AzureADMultipleOrgs, AzureADandPersonalMicrosoftAccount or PersonalMicrosoftAccount. Defaults to AzureADMyOrg.
Changing sign_in_audience for existing applications When updating an existing application to use a sign_in_audience value of AzureADandPersonalMicrosoftAccount or PersonalMicrosoftAccount, your configuration may no longer be valid. Refer to official documentation to understand the differences in supported configurations. Where possible, the provider will attempt to validate your configuration and try to avoid applying unsupported settings to your application.
SinglePageApplication Pulumi.AzureAD.Inputs.ApplicationSinglePageApplication: A single_page_application block as documented below, which configures single-page application (SPA) related settings for this application.
SupportUrl string: URL of the application's support page.
Tags List<string>: A set of tags to apply to the application for configuring specific behaviours of the application and linked service principals. Note that these are not provided for use by practitioners. Cannot be used together with the feature_tags block.
Tags and Features Azure Active Directory uses special tag values to configure the behavior of applications. These can be specified using either the tags property or with the feature_tags block. If you need to set any custom tag values not supported by the feature_tags block, it's recommended to use the tags property. Tag values also propagate to any linked service principals.
TemplateId string: Unique ID for a templated application in the Azure AD App Gallery, from which to create the application. Changing this forces a new resource to be created.
TermsOfServiceUrl string: URL of the application's terms of service statement.
Web Pulumi.AzureAD.Inputs.ApplicationWeb: A web block as documented below, which configures web related settings for this application.
Application Name Uniqueness Application names are not unique within Azure Active Directory. Use the prevent_duplicate_names argument to check for existing applications if you want to avoid name collisions.

DisplayName string: The display name for the application.
Api ApplicationApiArgs: An api block as documented below, which configures API related settings for this application.
AppRoles []ApplicationAppRoleArgs: A collection of app_role blocks as documented below. For more information see official documentation on Application Roles.
Description string: A description of the application, as shown to end users.
DeviceOnlyAuthEnabled bool: Specifies whether this application supports device authentication without a user. Defaults to false.
FallbackPublicClientEnabled bool: Specifies whether the application is a public client. Appropriate for apps using token grant flows that don't use a redirect URI. Defaults to false.
FeatureTags []ApplicationFeatureTagArgs: A feature_tags block as described below. Cannot be used together with the tags property.
Features and Tags Features are configured for an application using tags, and are provided as a shortcut to set the corresponding magic tag value for each feature. You cannot configure feature_tags and tags for an application at the same time, so if you need to assign additional custom tags it's recommended to use the tags property instead. Tag values also propagate to any linked service principals.
GroupMembershipClaims []string: Configures the groups claim issued in a user or OAuth 2.0 access token that the app expects. Possible values are None, SecurityGroup, DirectoryRole, ApplicationGroup or All.
IdentifierUris []string: A set of user-defined URI(s) that uniquely identify an application within its Azure AD tenant, or within a verified custom domain if the application is multi-tenant.
LogoImage string: A logo image to upload for the application, as a raw base64-encoded string. The image should be in gif, jpeg or png format. Note that once an image has been uploaded, it is not possible to remove it without replacing it with another image.
MarketingUrl string: URL of the application's marketing page.
Notes string: User-specified notes relevant for the management of the application.
Oauth2PostResponseRequired bool: Specifies whether, as part of OAuth 2.0 token requests, Azure AD allows POST requests, as opposed to GET requests. Defaults to false, which specifies that only GET requests are allowed.
OptionalClaims ApplicationOptionalClaimsArgs: An optional_claims block as documented below.
Owners []string: A list of object IDs of principals that will be granted ownership of the application
PreventDuplicateNames bool: If true, will return an error if an existing application is found with the same name. Defaults to false.
PrivacyStatementUrl string: URL of the application's privacy statement.
PublicClient ApplicationPublicClientArgs: A public_client block as documented below, which configures non-web app or non-web API application settings, for example mobile or other public clients such as an installed application running on a desktop device.
RequiredResourceAccesses []ApplicationRequiredResourceAccessArgs: A collection of required_resource_access blocks as documented below.
ServiceManagementReference string: References application context information from a Service or Asset Management database.
SignInAudience string: The Microsoft account types that are supported for the current application. Must be one of AzureADMyOrg, AzureADMultipleOrgs, AzureADandPersonalMicrosoftAccount or PersonalMicrosoftAccount. Defaults to AzureADMyOrg.
Changing sign_in_audience for existing applications When updating an existing application to use a sign_in_audience value of AzureADandPersonalMicrosoftAccount or PersonalMicrosoftAccount, your configuration may no longer be valid. Refer to official documentation to understand the differences in supported configurations. Where possible, the provider will attempt to validate your configuration and try to avoid applying unsupported settings to your application.
SinglePageApplication ApplicationSinglePageApplicationArgs: A single_page_application block as documented below, which configures single-page application (SPA) related settings for this application.
SupportUrl string: URL of the application's support page.
Tags []string: A set of tags to apply to the application for configuring specific behaviours of the application and linked service principals. Note that these are not provided for use by practitioners. Cannot be used together with the feature_tags block.
Tags and Features Azure Active Directory uses special tag values to configure the behavior of applications. These can be specified using either the tags property or with the feature_tags block. If you need to set any custom tag values not supported by the feature_tags block, it's recommended to use the tags property. Tag values also propagate to any linked service principals.
TemplateId string: Unique ID for a templated application in the Azure AD App Gallery, from which to create the application. Changing this forces a new resource to be created.
TermsOfServiceUrl string: URL of the application's terms of service statement.
Web ApplicationWebArgs: A web block as documented below, which configures web related settings for this application.
Application Name Uniqueness Application names are not unique within Azure Active Directory. Use the prevent_duplicate_names argument to check for existing applications if you want to avoid name collisions.

displayName String: The display name for the application.
api ApplicationApi: An api block as documented below, which configures API related settings for this application.
appRoles List<ApplicationAppRole>: A collection of app_role blocks as documented below. For more information see official documentation on Application Roles.
description String: A description of the application, as shown to end users.
deviceOnlyAuthEnabled Boolean: Specifies whether this application supports device authentication without a user. Defaults to false.
fallbackPublicClientEnabled Boolean: Specifies whether the application is a public client. Appropriate for apps using token grant flows that don't use a redirect URI. Defaults to false.
featureTags List<ApplicationFeatureTag>: A feature_tags block as described below. Cannot be used together with the tags property.
Features and Tags Features are configured for an application using tags, and are provided as a shortcut to set the corresponding magic tag value for each feature. You cannot configure feature_tags and tags for an application at the same time, so if you need to assign additional custom tags it's recommended to use the tags property instead. Tag values also propagate to any linked service principals.
groupMembershipClaims List<String>: Configures the groups claim issued in a user or OAuth 2.0 access token that the app expects. Possible values are None, SecurityGroup, DirectoryRole, ApplicationGroup or All.
identifierUris List<String>: A set of user-defined URI(s) that uniquely identify an application within its Azure AD tenant, or within a verified custom domain if the application is multi-tenant.
logoImage String: A logo image to upload for the application, as a raw base64-encoded string. The image should be in gif, jpeg or png format. Note that once an image has been uploaded, it is not possible to remove it without replacing it with another image.
marketingUrl String: URL of the application's marketing page.
notes String: User-specified notes relevant for the management of the application.
oauth2PostResponseRequired Boolean: Specifies whether, as part of OAuth 2.0 token requests, Azure AD allows POST requests, as opposed to GET requests. Defaults to false, which specifies that only GET requests are allowed.
optionalClaims ApplicationOptionalClaims: An optional_claims block as documented below.
owners List<String>: A list of object IDs of principals that will be granted ownership of the application
preventDuplicateNames Boolean: If true, will return an error if an existing application is found with the same name. Defaults to false.
privacyStatementUrl String: URL of the application's privacy statement.
publicClient ApplicationPublicClient: A public_client block as documented below, which configures non-web app or non-web API application settings, for example mobile or other public clients such as an installed application running on a desktop device.
requiredResourceAccesses List<ApplicationRequiredResourceAccess>: A collection of required_resource_access blocks as documented below.
serviceManagementReference String: References application context information from a Service or Asset Management database.
signInAudience String: The Microsoft account types that are supported for the current application. Must be one of AzureADMyOrg, AzureADMultipleOrgs, AzureADandPersonalMicrosoftAccount or PersonalMicrosoftAccount. Defaults to AzureADMyOrg.
Changing sign_in_audience for existing applications When updating an existing application to use a sign_in_audience value of AzureADandPersonalMicrosoftAccount or PersonalMicrosoftAccount, your configuration may no longer be valid. Refer to official documentation to understand the differences in supported configurations. Where possible, the provider will attempt to validate your configuration and try to avoid applying unsupported settings to your application.
singlePageApplication ApplicationSinglePageApplication: A single_page_application block as documented below, which configures single-page application (SPA) related settings for this application.
supportUrl String: URL of the application's support page.
tags List<String>: A set of tags to apply to the application for configuring specific behaviours of the application and linked service principals. Note that these are not provided for use by practitioners. Cannot be used together with the feature_tags block.
Tags and Features Azure Active Directory uses special tag values to configure the behavior of applications. These can be specified using either the tags property or with the feature_tags block. If you need to set any custom tag values not supported by the feature_tags block, it's recommended to use the tags property. Tag values also propagate to any linked service principals.
templateId String: Unique ID for a templated application in the Azure AD App Gallery, from which to create the application. Changing this forces a new resource to be created.
termsOfServiceUrl String: URL of the application's terms of service statement.
web ApplicationWeb: A web block as documented below, which configures web related settings for this application.
Application Name Uniqueness Application names are not unique within Azure Active Directory. Use the prevent_duplicate_names argument to check for existing applications if you want to avoid name collisions.

displayName string: The display name for the application.
api ApplicationApi: An api block as documented below, which configures API related settings for this application.
appRoles ApplicationAppRole[]: A collection of app_role blocks as documented below. For more information see official documentation on Application Roles.
description string: A description of the application, as shown to end users.
deviceOnlyAuthEnabled boolean: Specifies whether this application supports device authentication without a user. Defaults to false.
fallbackPublicClientEnabled boolean: Specifies whether the application is a public client. Appropriate for apps using token grant flows that don't use a redirect URI. Defaults to false.
featureTags ApplicationFeatureTag[]: A feature_tags block as described below. Cannot be used together with the tags property.
Features and Tags Features are configured for an application using tags, and are provided as a shortcut to set the corresponding magic tag value for each feature. You cannot configure feature_tags and tags for an application at the same time, so if you need to assign additional custom tags it's recommended to use the tags property instead. Tag values also propagate to any linked service principals.
groupMembershipClaims string[]: Configures the groups claim issued in a user or OAuth 2.0 access token that the app expects. Possible values are None, SecurityGroup, DirectoryRole, ApplicationGroup or All.
identifierUris string[]: A set of user-defined URI(s) that uniquely identify an application within its Azure AD tenant, or within a verified custom domain if the application is multi-tenant.
logoImage string: A logo image to upload for the application, as a raw base64-encoded string. The image should be in gif, jpeg or png format. Note that once an image has been uploaded, it is not possible to remove it without replacing it with another image.
marketingUrl string: URL of the application's marketing page.
notes string: User-specified notes relevant for the management of the application.
oauth2PostResponseRequired boolean: Specifies whether, as part of OAuth 2.0 token requests, Azure AD allows POST requests, as opposed to GET requests. Defaults to false, which specifies that only GET requests are allowed.
optionalClaims ApplicationOptionalClaims: An optional_claims block as documented below.
owners string[]: A list of object IDs of principals that will be granted ownership of the application
preventDuplicateNames boolean: If true, will return an error if an existing application is found with the same name. Defaults to false.
privacyStatementUrl string: URL of the application's privacy statement.
publicClient ApplicationPublicClient: A public_client block as documented below, which configures non-web app or non-web API application settings, for example mobile or other public clients such as an installed application running on a desktop device.
requiredResourceAccesses ApplicationRequiredResourceAccess[]: A collection of required_resource_access blocks as documented below.
serviceManagementReference string: References application context information from a Service or Asset Management database.
signInAudience string: The Microsoft account types that are supported for the current application. Must be one of AzureADMyOrg, AzureADMultipleOrgs, AzureADandPersonalMicrosoftAccount or PersonalMicrosoftAccount. Defaults to AzureADMyOrg.
Changing sign_in_audience for existing applications When updating an existing application to use a sign_in_audience value of AzureADandPersonalMicrosoftAccount or PersonalMicrosoftAccount, your configuration may no longer be valid. Refer to official documentation to understand the differences in supported configurations. Where possible, the provider will attempt to validate your configuration and try to avoid applying unsupported settings to your application.
singlePageApplication ApplicationSinglePageApplication: A single_page_application block as documented below, which configures single-page application (SPA) related settings for this application.
supportUrl string: URL of the application's support page.
tags string[]: A set of tags to apply to the application for configuring specific behaviours of the application and linked service principals. Note that these are not provided for use by practitioners. Cannot be used together with the feature_tags block.
Tags and Features Azure Active Directory uses special tag values to configure the behavior of applications. These can be specified using either the tags property or with the feature_tags block. If you need to set any custom tag values not supported by the feature_tags block, it's recommended to use the tags property. Tag values also propagate to any linked service principals.
templateId string: Unique ID for a templated application in the Azure AD App Gallery, from which to create the application. Changing this forces a new resource to be created.
termsOfServiceUrl string: URL of the application's terms of service statement.
web ApplicationWeb: A web block as documented below, which configures web related settings for this application.
Application Name Uniqueness Application names are not unique within Azure Active Directory. Use the prevent_duplicate_names argument to check for existing applications if you want to avoid name collisions.

display_name str: The display name for the application.
api ApplicationApiArgs: An api block as documented below, which configures API related settings for this application.
app_roles Sequence[ApplicationAppRoleArgs]: A collection of app_role blocks as documented below. For more information see official documentation on Application Roles.
description str: A description of the application, as shown to end users.
device_only_auth_enabled bool: Specifies whether this application supports device authentication without a user. Defaults to false.
fallback_public_client_enabled bool: Specifies whether the application is a public client. Appropriate for apps using token grant flows that don't use a redirect URI. Defaults to false.
feature_tags Sequence[ApplicationFeatureTagArgs]: A feature_tags block as described below. Cannot be used together with the tags property.
Features and Tags Features are configured for an application using tags, and are provided as a shortcut to set the corresponding magic tag value for each feature. You cannot configure feature_tags and tags for an application at the same time, so if you need to assign additional custom tags it's recommended to use the tags property instead. Tag values also propagate to any linked service principals.
group_membership_claims Sequence[str]: Configures the groups claim issued in a user or OAuth 2.0 access token that the app expects. Possible values are None, SecurityGroup, DirectoryRole, ApplicationGroup or All.
identifier_uris Sequence[str]: A set of user-defined URI(s) that uniquely identify an application within its Azure AD tenant, or within a verified custom domain if the application is multi-tenant.
logo_image str: A logo image to upload for the application, as a raw base64-encoded string. The image should be in gif, jpeg or png format. Note that once an image has been uploaded, it is not possible to remove it without replacing it with another image.
marketing_url str: URL of the application's marketing page.
notes str: User-specified notes relevant for the management of the application.
oauth2_post_response_required bool: Specifies whether, as part of OAuth 2.0 token requests, Azure AD allows POST requests, as opposed to GET requests. Defaults to false, which specifies that only GET requests are allowed.
optional_claims ApplicationOptionalClaimsArgs: An optional_claims block as documented below.
owners Sequence[str]: A list of object IDs of principals that will be granted ownership of the application
prevent_duplicate_names bool: If true, will return an error if an existing application is found with the same name. Defaults to false.
privacy_statement_url str: URL of the application's privacy statement.
public_client ApplicationPublicClientArgs: A public_client block as documented below, which configures non-web app or non-web API application settings, for example mobile or other public clients such as an installed application running on a desktop device.
required_resource_accesses Sequence[ApplicationRequiredResourceAccessArgs]: A collection of required_resource_access blocks as documented below.
service_management_reference str: References application context information from a Service or Asset Management database.
sign_in_audience str: The Microsoft account types that are supported for the current application. Must be one of AzureADMyOrg, AzureADMultipleOrgs, AzureADandPersonalMicrosoftAccount or PersonalMicrosoftAccount. Defaults to AzureADMyOrg.
Changing sign_in_audience for existing applications When updating an existing application to use a sign_in_audience value of AzureADandPersonalMicrosoftAccount or PersonalMicrosoftAccount, your configuration may no longer be valid. Refer to official documentation to understand the differences in supported configurations. Where possible, the provider will attempt to validate your configuration and try to avoid applying unsupported settings to your application.
single_page_application ApplicationSinglePageApplicationArgs: A single_page_application block as documented below, which configures single-page application (SPA) related settings for this application.
support_url str: URL of the application's support page.
tags Sequence[str]: A set of tags to apply to the application for configuring specific behaviours of the application and linked service principals. Note that these are not provided for use by practitioners. Cannot be used together with the feature_tags block.
Tags and Features Azure Active Directory uses special tag values to configure the behavior of applications. These can be specified using either the tags property or with the feature_tags block. If you need to set any custom tag values not supported by the feature_tags block, it's recommended to use the tags property. Tag values also propagate to any linked service principals.
template_id str: Unique ID for a templated application in the Azure AD App Gallery, from which to create the application. Changing this forces a new resource to be created.
terms_of_service_url str: URL of the application's terms of service statement.
web ApplicationWebArgs: A web block as documented below, which configures web related settings for this application.
Application Name Uniqueness Application names are not unique within Azure Active Directory. Use the prevent_duplicate_names argument to check for existing applications if you want to avoid name collisions.

displayName String: The display name for the application.
api Property Map: An api block as documented below, which configures API related settings for this application.
appRoles List<Property Map>: A collection of app_role blocks as documented below. For more information see official documentation on Application Roles.
description String: A description of the application, as shown to end users.
deviceOnlyAuthEnabled Boolean: Specifies whether this application supports device authentication without a user. Defaults to false.
fallbackPublicClientEnabled Boolean: Specifies whether the application is a public client. Appropriate for apps using token grant flows that don't use a redirect URI. Defaults to false.
featureTags List<Property Map>: A feature_tags block as described below. Cannot be used together with the tags property.
Features and Tags Features are configured for an application using tags, and are provided as a shortcut to set the corresponding magic tag value for each feature. You cannot configure feature_tags and tags for an application at the same time, so if you need to assign additional custom tags it's recommended to use the tags property instead. Tag values also propagate to any linked service principals.
groupMembershipClaims List<String>: Configures the groups claim issued in a user or OAuth 2.0 access token that the app expects. Possible values are None, SecurityGroup, DirectoryRole, ApplicationGroup or All.
identifierUris List<String>: A set of user-defined URI(s) that uniquely identify an application within its Azure AD tenant, or within a verified custom domain if the application is multi-tenant.
logoImage String: A logo image to upload for the application, as a raw base64-encoded string. The image should be in gif, jpeg or png format. Note that once an image has been uploaded, it is not possible to remove it without replacing it with another image.
marketingUrl String: URL of the application's marketing page.
notes String: User-specified notes relevant for the management of the application.
oauth2PostResponseRequired Boolean: Specifies whether, as part of OAuth 2.0 token requests, Azure AD allows POST requests, as opposed to GET requests. Defaults to false, which specifies that only GET requests are allowed.
optionalClaims Property Map: An optional_claims block as documented below.
owners List<String>: A list of object IDs of principals that will be granted ownership of the application
preventDuplicateNames Boolean: If true, will return an error if an existing application is found with the same name. Defaults to false.
privacyStatementUrl String: URL of the application's privacy statement.
publicClient Property Map: A public_client block as documented below, which configures non-web app or non-web API application settings, for example mobile or other public clients such as an installed application running on a desktop device.
requiredResourceAccesses List<Property Map>: A collection of required_resource_access blocks as documented below.
serviceManagementReference String: References application context information from a Service or Asset Management database.
signInAudience String: The Microsoft account types that are supported for the current application. Must be one of AzureADMyOrg, AzureADMultipleOrgs, AzureADandPersonalMicrosoftAccount or PersonalMicrosoftAccount. Defaults to AzureADMyOrg.
Changing sign_in_audience for existing applications When updating an existing application to use a sign_in_audience value of AzureADandPersonalMicrosoftAccount or PersonalMicrosoftAccount, your configuration may no longer be valid. Refer to official documentation to understand the differences in supported configurations. Where possible, the provider will attempt to validate your configuration and try to avoid applying unsupported settings to your application.
singlePageApplication Property Map: A single_page_application block as documented below, which configures single-page application (SPA) related settings for this application.
supportUrl String: URL of the application's support page.
tags List<String>: A set of tags to apply to the application for configuring specific behaviours of the application and linked service principals. Note that these are not provided for use by practitioners. Cannot be used together with the feature_tags block.
Tags and Features Azure Active Directory uses special tag values to configure the behavior of applications. These can be specified using either the tags property or with the feature_tags block. If you need to set any custom tag values not supported by the feature_tags block, it's recommended to use the tags property. Tag values also propagate to any linked service principals.
templateId String: Unique ID for a templated application in the Azure AD App Gallery, from which to create the application. Changing this forces a new resource to be created.
termsOfServiceUrl String: URL of the application's terms of service statement.
web Property Map: A web block as documented below, which configures web related settings for this application.
Application Name Uniqueness Application names are not unique within Azure Active Directory. Use the prevent_duplicate_names argument to check for existing applications if you want to avoid name collisions.

Outputs

All input properties are implicitly available as output properties. Additionally, the Application resource produces the following output properties:

AppRoleIds Dictionary<string, string>: A mapping of app role values to app role IDs, intended to be useful when referencing app roles in other resources in your configuration.
ApplicationId string: The Application ID (also called Client ID).
DisabledByMicrosoft string: Whether Microsoft has disabled the registered application. If the application is disabled, this will be a string indicating the status/reason, e.g. DisabledDueToViolationOfServicesAgreement
Id string: The provider-assigned unique ID for this managed resource.
LogoUrl string: CDN URL to the application's logo, as uploaded with the logo_image property.
Oauth2PermissionScopeIds Dictionary<string, string>: A mapping of OAuth2.0 permission scope values to scope IDs, intended to be useful when referencing permission scopes in other resources in your configuration.
ObjectId string: The application's object ID.
PublisherDomain string: The verified publisher domain for the application.

AppRoleIds map[string]string: A mapping of app role values to app role IDs, intended to be useful when referencing app roles in other resources in your configuration.
ApplicationId string: The Application ID (also called Client ID).
DisabledByMicrosoft string: Whether Microsoft has disabled the registered application. If the application is disabled, this will be a string indicating the status/reason, e.g. DisabledDueToViolationOfServicesAgreement
Id string: The provider-assigned unique ID for this managed resource.
LogoUrl string: CDN URL to the application's logo, as uploaded with the logo_image property.
Oauth2PermissionScopeIds map[string]string: A mapping of OAuth2.0 permission scope values to scope IDs, intended to be useful when referencing permission scopes in other resources in your configuration.
ObjectId string: The application's object ID.
PublisherDomain string: The verified publisher domain for the application.

appRoleIds Map<String,String>: A mapping of app role values to app role IDs, intended to be useful when referencing app roles in other resources in your configuration.
applicationId String: The Application ID (also called Client ID).
disabledByMicrosoft String: Whether Microsoft has disabled the registered application. If the application is disabled, this will be a string indicating the status/reason, e.g. DisabledDueToViolationOfServicesAgreement
id String: The provider-assigned unique ID for this managed resource.
logoUrl String: CDN URL to the application's logo, as uploaded with the logo_image property.
oauth2PermissionScopeIds Map<String,String>: A mapping of OAuth2.0 permission scope values to scope IDs, intended to be useful when referencing permission scopes in other resources in your configuration.
objectId String: The application's object ID.
publisherDomain String: The verified publisher domain for the application.

appRoleIds {[key: string]: string}: A mapping of app role values to app role IDs, intended to be useful when referencing app roles in other resources in your configuration.
applicationId string: The Application ID (also called Client ID).
disabledByMicrosoft string: Whether Microsoft has disabled the registered application. If the application is disabled, this will be a string indicating the status/reason, e.g. DisabledDueToViolationOfServicesAgreement
id string: The provider-assigned unique ID for this managed resource.
logoUrl string: CDN URL to the application's logo, as uploaded with the logo_image property.
oauth2PermissionScopeIds {[key: string]: string}: A mapping of OAuth2.0 permission scope values to scope IDs, intended to be useful when referencing permission scopes in other resources in your configuration.
objectId string: The application's object ID.
publisherDomain string: The verified publisher domain for the application.

app_role_ids Mapping[str, str]: A mapping of app role values to app role IDs, intended to be useful when referencing app roles in other resources in your configuration.
application_id str: The Application ID (also called Client ID).
disabled_by_microsoft str: Whether Microsoft has disabled the registered application. If the application is disabled, this will be a string indicating the status/reason, e.g. DisabledDueToViolationOfServicesAgreement
id str: The provider-assigned unique ID for this managed resource.
logo_url str: CDN URL to the application's logo, as uploaded with the logo_image property.
oauth2_permission_scope_ids Mapping[str, str]: A mapping of OAuth2.0 permission scope values to scope IDs, intended to be useful when referencing permission scopes in other resources in your configuration.
object_id str: The application's object ID.
publisher_domain str: The verified publisher domain for the application.

appRoleIds Map<String>: A mapping of app role values to app role IDs, intended to be useful when referencing app roles in other resources in your configuration.
applicationId String: The Application ID (also called Client ID).
disabledByMicrosoft String: Whether Microsoft has disabled the registered application. If the application is disabled, this will be a string indicating the status/reason, e.g. DisabledDueToViolationOfServicesAgreement
id String: The provider-assigned unique ID for this managed resource.
logoUrl String: CDN URL to the application's logo, as uploaded with the logo_image property.
oauth2PermissionScopeIds Map<String>: A mapping of OAuth2.0 permission scope values to scope IDs, intended to be useful when referencing permission scopes in other resources in your configuration.
objectId String: The application's object ID.
publisherDomain String: The verified publisher domain for the application.

Look up Existing Application Resource

Get an existing Application resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

public static get(name: string, id: Input<ID>, state?: ApplicationState, opts?: CustomResourceOptions): Application

@staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        api: Optional[ApplicationApiArgs] = None,
        app_role_ids: Optional[Mapping[str, str]] = None,
        app_roles: Optional[Sequence[ApplicationAppRoleArgs]] = None,
        application_id: Optional[str] = None,
        description: Optional[str] = None,
        device_only_auth_enabled: Optional[bool] = None,
        disabled_by_microsoft: Optional[str] = None,
        display_name: Optional[str] = None,
        fallback_public_client_enabled: Optional[bool] = None,
        feature_tags: Optional[Sequence[ApplicationFeatureTagArgs]] = None,
        group_membership_claims: Optional[Sequence[str]] = None,
        identifier_uris: Optional[Sequence[str]] = None,
        logo_image: Optional[str] = None,
        logo_url: Optional[str] = None,
        marketing_url: Optional[str] = None,
        notes: Optional[str] = None,
        oauth2_permission_scope_ids: Optional[Mapping[str, str]] = None,
        oauth2_post_response_required: Optional[bool] = None,
        object_id: Optional[str] = None,
        optional_claims: Optional[ApplicationOptionalClaimsArgs] = None,
        owners: Optional[Sequence[str]] = None,
        prevent_duplicate_names: Optional[bool] = None,
        privacy_statement_url: Optional[str] = None,
        public_client: Optional[ApplicationPublicClientArgs] = None,
        publisher_domain: Optional[str] = None,
        required_resource_accesses: Optional[Sequence[ApplicationRequiredResourceAccessArgs]] = None,
        service_management_reference: Optional[str] = None,
        sign_in_audience: Optional[str] = None,
        single_page_application: Optional[ApplicationSinglePageApplicationArgs] = None,
        support_url: Optional[str] = None,
        tags: Optional[Sequence[str]] = None,
        template_id: Optional[str] = None,
        terms_of_service_url: Optional[str] = None,
        web: Optional[ApplicationWebArgs] = None) -> Application

func GetApplication(ctx *Context, name string, id IDInput, state *ApplicationState, opts ...ResourceOption) (*Application, error)

public static Application Get(string name, Input<string> id, ApplicationState? state, CustomResourceOptions? opts = null)

public static Application get(String name, Output<String> id, ApplicationState state, CustomResourceOptions options)

Resource lookup is not supported in YAML

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

resource_name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

The following state arguments are supported:

Api Pulumi.AzureAD.Inputs.ApplicationApi: An api block as documented below, which configures API related settings for this application.
AppRoleIds Dictionary<string, string>: A mapping of app role values to app role IDs, intended to be useful when referencing app roles in other resources in your configuration.
AppRoles List<Pulumi.AzureAD.Inputs.ApplicationAppRole>: A collection of app_role blocks as documented below. For more information see official documentation on Application Roles.
ApplicationId string: The Application ID (also called Client ID).
Description string: A description of the application, as shown to end users.
DeviceOnlyAuthEnabled bool: Specifies whether this application supports device authentication without a user. Defaults to false.
DisabledByMicrosoft string: Whether Microsoft has disabled the registered application. If the application is disabled, this will be a string indicating the status/reason, e.g. DisabledDueToViolationOfServicesAgreement
DisplayName string: The display name for the application.
FallbackPublicClientEnabled bool: Specifies whether the application is a public client. Appropriate for apps using token grant flows that don't use a redirect URI. Defaults to false.
FeatureTags List<Pulumi.AzureAD.Inputs.ApplicationFeatureTag>: A feature_tags block as described below. Cannot be used together with the tags property.
Features and Tags Features are configured for an application using tags, and are provided as a shortcut to set the corresponding magic tag value for each feature. You cannot configure feature_tags and tags for an application at the same time, so if you need to assign additional custom tags it's recommended to use the tags property instead. Tag values also propagate to any linked service principals.
GroupMembershipClaims List<string>: Configures the groups claim issued in a user or OAuth 2.0 access token that the app expects. Possible values are None, SecurityGroup, DirectoryRole, ApplicationGroup or All.
IdentifierUris List<string>: A set of user-defined URI(s) that uniquely identify an application within its Azure AD tenant, or within a verified custom domain if the application is multi-tenant.
LogoImage string: A logo image to upload for the application, as a raw base64-encoded string. The image should be in gif, jpeg or png format. Note that once an image has been uploaded, it is not possible to remove it without replacing it with another image.
LogoUrl string: CDN URL to the application's logo, as uploaded with the logo_image property.
MarketingUrl string: URL of the application's marketing page.
Notes string: User-specified notes relevant for the management of the application.
Oauth2PermissionScopeIds Dictionary<string, string>: A mapping of OAuth2.0 permission scope values to scope IDs, intended to be useful when referencing permission scopes in other resources in your configuration.
Oauth2PostResponseRequired bool: Specifies whether, as part of OAuth 2.0 token requests, Azure AD allows POST requests, as opposed to GET requests. Defaults to false, which specifies that only GET requests are allowed.
ObjectId string: The application's object ID.
OptionalClaims Pulumi.AzureAD.Inputs.ApplicationOptionalClaims: An optional_claims block as documented below.
Owners List<string>: A list of object IDs of principals that will be granted ownership of the application
PreventDuplicateNames bool: If true, will return an error if an existing application is found with the same name. Defaults to false.
PrivacyStatementUrl string: URL of the application's privacy statement.
PublicClient Pulumi.AzureAD.Inputs.ApplicationPublicClient: A public_client block as documented below, which configures non-web app or non-web API application settings, for example mobile or other public clients such as an installed application running on a desktop device.
PublisherDomain string: The verified publisher domain for the application.
RequiredResourceAccesses List<Pulumi.AzureAD.Inputs.ApplicationRequiredResourceAccess>: A collection of required_resource_access blocks as documented below.
ServiceManagementReference string: References application context information from a Service or Asset Management database.
SignInAudience string: The Microsoft account types that are supported for the current application. Must be one of AzureADMyOrg, AzureADMultipleOrgs, AzureADandPersonalMicrosoftAccount or PersonalMicrosoftAccount. Defaults to AzureADMyOrg.
Changing sign_in_audience for existing applications When updating an existing application to use a sign_in_audience value of AzureADandPersonalMicrosoftAccount or PersonalMicrosoftAccount, your configuration may no longer be valid. Refer to official documentation to understand the differences in supported configurations. Where possible, the provider will attempt to validate your configuration and try to avoid applying unsupported settings to your application.
SinglePageApplication Pulumi.AzureAD.Inputs.ApplicationSinglePageApplication: A single_page_application block as documented below, which configures single-page application (SPA) related settings for this application.
SupportUrl string: URL of the application's support page.
Tags List<string>: A set of tags to apply to the application for configuring specific behaviours of the application and linked service principals. Note that these are not provided for use by practitioners. Cannot be used together with the feature_tags block.
Tags and Features Azure Active Directory uses special tag values to configure the behavior of applications. These can be specified using either the tags property or with the feature_tags block. If you need to set any custom tag values not supported by the feature_tags block, it's recommended to use the tags property. Tag values also propagate to any linked service principals.
TemplateId string: Unique ID for a templated application in the Azure AD App Gallery, from which to create the application. Changing this forces a new resource to be created.
TermsOfServiceUrl string: URL of the application's terms of service statement.
Web Pulumi.AzureAD.Inputs.ApplicationWeb: A web block as documented below, which configures web related settings for this application.
Application Name Uniqueness Application names are not unique within Azure Active Directory. Use the prevent_duplicate_names argument to check for existing applications if you want to avoid name collisions.

Api ApplicationApiArgs: An api block as documented below, which configures API related settings for this application.
AppRoleIds map[string]string: A mapping of app role values to app role IDs, intended to be useful when referencing app roles in other resources in your configuration.
AppRoles []ApplicationAppRoleArgs: A collection of app_role blocks as documented below. For more information see official documentation on Application Roles.
ApplicationId string: The Application ID (also called Client ID).
Description string: A description of the application, as shown to end users.
DeviceOnlyAuthEnabled bool: Specifies whether this application supports device authentication without a user. Defaults to false.
DisabledByMicrosoft string: Whether Microsoft has disabled the registered application. If the application is disabled, this will be a string indicating the status/reason, e.g. DisabledDueToViolationOfServicesAgreement
DisplayName string: The display name for the application.
FallbackPublicClientEnabled bool: Specifies whether the application is a public client. Appropriate for apps using token grant flows that don't use a redirect URI. Defaults to false.
FeatureTags []ApplicationFeatureTagArgs: A feature_tags block as described below. Cannot be used together with the tags property.
Features and Tags Features are configured for an application using tags, and are provided as a shortcut to set the corresponding magic tag value for each feature. You cannot configure feature_tags and tags for an application at the same time, so if you need to assign additional custom tags it's recommended to use the tags property instead. Tag values also propagate to any linked service principals.
GroupMembershipClaims []string: Configures the groups claim issued in a user or OAuth 2.0 access token that the app expects. Possible values are None, SecurityGroup, DirectoryRole, ApplicationGroup or All.
IdentifierUris []string: A set of user-defined URI(s) that uniquely identify an application within its Azure AD tenant, or within a verified custom domain if the application is multi-tenant.
LogoImage string: A logo image to upload for the application, as a raw base64-encoded string. The image should be in gif, jpeg or png format. Note that once an image has been uploaded, it is not possible to remove it without replacing it with another image.
LogoUrl string: CDN URL to the application's logo, as uploaded with the logo_image property.
MarketingUrl string: URL of the application's marketing page.
Notes string: User-specified notes relevant for the management of the application.
Oauth2PermissionScopeIds map[string]string: A mapping of OAuth2.0 permission scope values to scope IDs, intended to be useful when referencing permission scopes in other resources in your configuration.
Oauth2PostResponseRequired bool: Specifies whether, as part of OAuth 2.0 token requests, Azure AD allows POST requests, as opposed to GET requests. Defaults to false, which specifies that only GET requests are allowed.
ObjectId string: The application's object ID.
OptionalClaims ApplicationOptionalClaimsArgs: An optional_claims block as documented below.
Owners []string: A list of object IDs of principals that will be granted ownership of the application
PreventDuplicateNames bool: If true, will return an error if an existing application is found with the same name. Defaults to false.
PrivacyStatementUrl string: URL of the application's privacy statement.
PublicClient ApplicationPublicClientArgs: A public_client block as documented below, which configures non-web app or non-web API application settings, for example mobile or other public clients such as an installed application running on a desktop device.
PublisherDomain string: The verified publisher domain for the application.
RequiredResourceAccesses []ApplicationRequiredResourceAccessArgs: A collection of required_resource_access blocks as documented below.
ServiceManagementReference string: References application context information from a Service or Asset Management database.
SignInAudience string: The Microsoft account types that are supported for the current application. Must be one of AzureADMyOrg, AzureADMultipleOrgs, AzureADandPersonalMicrosoftAccount or PersonalMicrosoftAccount. Defaults to AzureADMyOrg.
Changing sign_in_audience for existing applications When updating an existing application to use a sign_in_audience value of AzureADandPersonalMicrosoftAccount or PersonalMicrosoftAccount, your configuration may no longer be valid. Refer to official documentation to understand the differences in supported configurations. Where possible, the provider will attempt to validate your configuration and try to avoid applying unsupported settings to your application.
SinglePageApplication ApplicationSinglePageApplicationArgs: A single_page_application block as documented below, which configures single-page application (SPA) related settings for this application.
SupportUrl string: URL of the application's support page.
Tags []string: A set of tags to apply to the application for configuring specific behaviours of the application and linked service principals. Note that these are not provided for use by practitioners. Cannot be used together with the feature_tags block.
Tags and Features Azure Active Directory uses special tag values to configure the behavior of applications. These can be specified using either the tags property or with the feature_tags block. If you need to set any custom tag values not supported by the feature_tags block, it's recommended to use the tags property. Tag values also propagate to any linked service principals.
TemplateId string: Unique ID for a templated application in the Azure AD App Gallery, from which to create the application. Changing this forces a new resource to be created.
TermsOfServiceUrl string: URL of the application's terms of service statement.
Web ApplicationWebArgs: A web block as documented below, which configures web related settings for this application.
Application Name Uniqueness Application names are not unique within Azure Active Directory. Use the prevent_duplicate_names argument to check for existing applications if you want to avoid name collisions.

api ApplicationApi: An api block as documented below, which configures API related settings for this application.
appRoleIds Map<String,String>: A mapping of app role values to app role IDs, intended to be useful when referencing app roles in other resources in your configuration.
appRoles List<ApplicationAppRole>: A collection of app_role blocks as documented below. For more information see official documentation on Application Roles.
applicationId String: The Application ID (also called Client ID).
description String: A description of the application, as shown to end users.
deviceOnlyAuthEnabled Boolean: Specifies whether this application supports device authentication without a user. Defaults to false.
disabledByMicrosoft String: Whether Microsoft has disabled the registered application. If the application is disabled, this will be a string indicating the status/reason, e.g. DisabledDueToViolationOfServicesAgreement
displayName String: The display name for the application.
fallbackPublicClientEnabled Boolean: Specifies whether the application is a public client. Appropriate for apps using token grant flows that don't use a redirect URI. Defaults to false.
featureTags List<ApplicationFeatureTag>: A feature_tags block as described below. Cannot be used together with the tags property.
Features and Tags Features are configured for an application using tags, and are provided as a shortcut to set the corresponding magic tag value for each feature. You cannot configure feature_tags and tags for an application at the same time, so if you need to assign additional custom tags it's recommended to use the tags property instead. Tag values also propagate to any linked service principals.
groupMembershipClaims List<String>: Configures the groups claim issued in a user or OAuth 2.0 access token that the app expects. Possible values are None, SecurityGroup, DirectoryRole, ApplicationGroup or All.
identifierUris List<String>: A set of user-defined URI(s) that uniquely identify an application within its Azure AD tenant, or within a verified custom domain if the application is multi-tenant.
logoImage String: A logo image to upload for the application, as a raw base64-encoded string. The image should be in gif, jpeg or png format. Note that once an image has been uploaded, it is not possible to remove it without replacing it with another image.
logoUrl String: CDN URL to the application's logo, as uploaded with the logo_image property.
marketingUrl String: URL of the application's marketing page.
notes String: User-specified notes relevant for the management of the application.
oauth2PermissionScopeIds Map<String,String>: A mapping of OAuth2.0 permission scope values to scope IDs, intended to be useful when referencing permission scopes in other resources in your configuration.
oauth2PostResponseRequired Boolean: Specifies whether, as part of OAuth 2.0 token requests, Azure AD allows POST requests, as opposed to GET requests. Defaults to false, which specifies that only GET requests are allowed.
objectId String: The application's object ID.
optionalClaims ApplicationOptionalClaims: An optional_claims block as documented below.
owners List<String>: A list of object IDs of principals that will be granted ownership of the application
preventDuplicateNames Boolean: If true, will return an error if an existing application is found with the same name. Defaults to false.
privacyStatementUrl String: URL of the application's privacy statement.
publicClient ApplicationPublicClient: A public_client block as documented below, which configures non-web app or non-web API application settings, for example mobile or other public clients such as an installed application running on a desktop device.
publisherDomain String: The verified publisher domain for the application.
requiredResourceAccesses List<ApplicationRequiredResourceAccess>: A collection of required_resource_access blocks as documented below.
serviceManagementReference String: References application context information from a Service or Asset Management database.
signInAudience String: The Microsoft account types that are supported for the current application. Must be one of AzureADMyOrg, AzureADMultipleOrgs, AzureADandPersonalMicrosoftAccount or PersonalMicrosoftAccount. Defaults to AzureADMyOrg.
Changing sign_in_audience for existing applications When updating an existing application to use a sign_in_audience value of AzureADandPersonalMicrosoftAccount or PersonalMicrosoftAccount, your configuration may no longer be valid. Refer to official documentation to understand the differences in supported configurations. Where possible, the provider will attempt to validate your configuration and try to avoid applying unsupported settings to your application.
singlePageApplication ApplicationSinglePageApplication: A single_page_application block as documented below, which configures single-page application (SPA) related settings for this application.
supportUrl String: URL of the application's support page.
tags List<String>: A set of tags to apply to the application for configuring specific behaviours of the application and linked service principals. Note that these are not provided for use by practitioners. Cannot be used together with the feature_tags block.
Tags and Features Azure Active Directory uses special tag values to configure the behavior of applications. These can be specified using either the tags property or with the feature_tags block. If you need to set any custom tag values not supported by the feature_tags block, it's recommended to use the tags property. Tag values also propagate to any linked service principals.
templateId String: Unique ID for a templated application in the Azure AD App Gallery, from which to create the application. Changing this forces a new resource to be created.
termsOfServiceUrl String: URL of the application's terms of service statement.
web ApplicationWeb: A web block as documented below, which configures web related settings for this application.
Application Name Uniqueness Application names are not unique within Azure Active Directory. Use the prevent_duplicate_names argument to check for existing applications if you want to avoid name collisions.

api ApplicationApi: An api block as documented below, which configures API related settings for this application.
appRoleIds {[key: string]: string}: A mapping of app role values to app role IDs, intended to be useful when referencing app roles in other resources in your configuration.
appRoles ApplicationAppRole[]: A collection of app_role blocks as documented below. For more information see official documentation on Application Roles.
applicationId string: The Application ID (also called Client ID).
description string: A description of the application, as shown to end users.
deviceOnlyAuthEnabled boolean: Specifies whether this application supports device authentication without a user. Defaults to false.
disabledByMicrosoft string: Whether Microsoft has disabled the registered application. If the application is disabled, this will be a string indicating the status/reason, e.g. DisabledDueToViolationOfServicesAgreement
displayName string: The display name for the application.
fallbackPublicClientEnabled boolean: Specifies whether the application is a public client. Appropriate for apps using token grant flows that don't use a redirect URI. Defaults to false.
featureTags ApplicationFeatureTag[]: A feature_tags block as described below. Cannot be used together with the tags property.
Features and Tags Features are configured for an application using tags, and are provided as a shortcut to set the corresponding magic tag value for each feature. You cannot configure feature_tags and tags for an application at the same time, so if you need to assign additional custom tags it's recommended to use the tags property instead. Tag values also propagate to any linked service principals.
groupMembershipClaims string[]: Configures the groups claim issued in a user or OAuth 2.0 access token that the app expects. Possible values are None, SecurityGroup, DirectoryRole, ApplicationGroup or All.
identifierUris string[]: A set of user-defined URI(s) that uniquely identify an application within its Azure AD tenant, or within a verified custom domain if the application is multi-tenant.
logoImage string: A logo image to upload for the application, as a raw base64-encoded string. The image should be in gif, jpeg or png format. Note that once an image has been uploaded, it is not possible to remove it without replacing it with another image.
logoUrl string: CDN URL to the application's logo, as uploaded with the logo_image property.
marketingUrl string: URL of the application's marketing page.
notes string: User-specified notes relevant for the management of the application.
oauth2PermissionScopeIds {[key: string]: string}: A mapping of OAuth2.0 permission scope values to scope IDs, intended to be useful when referencing permission scopes in other resources in your configuration.
oauth2PostResponseRequired boolean: Specifies whether, as part of OAuth 2.0 token requests, Azure AD allows POST requests, as opposed to GET requests. Defaults to false, which specifies that only GET requests are allowed.
objectId string: The application's object ID.
optionalClaims ApplicationOptionalClaims: An optional_claims block as documented below.
owners string[]: A list of object IDs of principals that will be granted ownership of the application
preventDuplicateNames boolean: If true, will return an error if an existing application is found with the same name. Defaults to false.
privacyStatementUrl string: URL of the application's privacy statement.
publicClient ApplicationPublicClient: A public_client block as documented below, which configures non-web app or non-web API application settings, for example mobile or other public clients such as an installed application running on a desktop device.
publisherDomain string: The verified publisher domain for the application.
requiredResourceAccesses ApplicationRequiredResourceAccess[]: A collection of required_resource_access blocks as documented below.
serviceManagementReference string: References application context information from a Service or Asset Management database.
signInAudience string: The Microsoft account types that are supported for the current application. Must be one of AzureADMyOrg, AzureADMultipleOrgs, AzureADandPersonalMicrosoftAccount or PersonalMicrosoftAccount. Defaults to AzureADMyOrg.
Changing sign_in_audience for existing applications When updating an existing application to use a sign_in_audience value of AzureADandPersonalMicrosoftAccount or PersonalMicrosoftAccount, your configuration may no longer be valid. Refer to official documentation to understand the differences in supported configurations. Where possible, the provider will attempt to validate your configuration and try to avoid applying unsupported settings to your application.
singlePageApplication ApplicationSinglePageApplication: A single_page_application block as documented below, which configures single-page application (SPA) related settings for this application.
supportUrl string: URL of the application's support page.
tags string[]: A set of tags to apply to the application for configuring specific behaviours of the application and linked service principals. Note that these are not provided for use by practitioners. Cannot be used together with the feature_tags block.
Tags and Features Azure Active Directory uses special tag values to configure the behavior of applications. These can be specified using either the tags property or with the feature_tags block. If you need to set any custom tag values not supported by the feature_tags block, it's recommended to use the tags property. Tag values also propagate to any linked service principals.
templateId string: Unique ID for a templated application in the Azure AD App Gallery, from which to create the application. Changing this forces a new resource to be created.
termsOfServiceUrl string: URL of the application's terms of service statement.
web ApplicationWeb: A web block as documented below, which configures web related settings for this application.
Application Name Uniqueness Application names are not unique within Azure Active Directory. Use the prevent_duplicate_names argument to check for existing applications if you want to avoid name collisions.

api ApplicationApiArgs: An api block as documented below, which configures API related settings for this application.
app_role_ids Mapping[str, str]: A mapping of app role values to app role IDs, intended to be useful when referencing app roles in other resources in your configuration.
app_roles Sequence[ApplicationAppRoleArgs]: A collection of app_role blocks as documented below. For more information see official documentation on Application Roles.
application_id str: The Application ID (also called Client ID).
description str: A description of the application, as shown to end users.
device_only_auth_enabled bool: Specifies whether this application supports device authentication without a user. Defaults to false.
disabled_by_microsoft str: Whether Microsoft has disabled the registered application. If the application is disabled, this will be a string indicating the status/reason, e.g. DisabledDueToViolationOfServicesAgreement
display_name str: The display name for the application.
fallback_public_client_enabled bool: Specifies whether the application is a public client. Appropriate for apps using token grant flows that don't use a redirect URI. Defaults to false.
feature_tags Sequence[ApplicationFeatureTagArgs]: A feature_tags block as described below. Cannot be used together with the tags property.
Features and Tags Features are configured for an application using tags, and are provided as a shortcut to set the corresponding magic tag value for each feature. You cannot configure feature_tags and tags for an application at the same time, so if you need to assign additional custom tags it's recommended to use the tags property instead. Tag values also propagate to any linked service principals.
group_membership_claims Sequence[str]: Configures the groups claim issued in a user or OAuth 2.0 access token that the app expects. Possible values are None, SecurityGroup, DirectoryRole, ApplicationGroup or All.
identifier_uris Sequence[str]: A set of user-defined URI(s) that uniquely identify an application within its Azure AD tenant, or within a verified custom domain if the application is multi-tenant.
logo_image str: A logo image to upload for the application, as a raw base64-encoded string. The image should be in gif, jpeg or png format. Note that once an image has been uploaded, it is not possible to remove it without replacing it with another image.
logo_url str: CDN URL to the application's logo, as uploaded with the logo_image property.
marketing_url str: URL of the application's marketing page.
notes str: User-specified notes relevant for the management of the application.
oauth2_permission_scope_ids Mapping[str, str]: A mapping of OAuth2.0 permission scope values to scope IDs, intended to be useful when referencing permission scopes in other resources in your configuration.
oauth2_post_response_required bool: Specifies whether, as part of OAuth 2.0 token requests, Azure AD allows POST requests, as opposed to GET requests. Defaults to false, which specifies that only GET requests are allowed.
object_id str: The application's object ID.
optional_claims ApplicationOptionalClaimsArgs: An optional_claims block as documented below.
owners Sequence[str]: A list of object IDs of principals that will be granted ownership of the application
prevent_duplicate_names bool: If true, will return an error if an existing application is found with the same name. Defaults to false.
privacy_statement_url str: URL of the application's privacy statement.
public_client ApplicationPublicClientArgs: A public_client block as documented below, which configures non-web app or non-web API application settings, for example mobile or other public clients such as an installed application running on a desktop device.
publisher_domain str: The verified publisher domain for the application.
required_resource_accesses Sequence[ApplicationRequiredResourceAccessArgs]: A collection of required_resource_access blocks as documented below.
service_management_reference str: References application context information from a Service or Asset Management database.
sign_in_audience str: The Microsoft account types that are supported for the current application. Must be one of AzureADMyOrg, AzureADMultipleOrgs, AzureADandPersonalMicrosoftAccount or PersonalMicrosoftAccount. Defaults to AzureADMyOrg.
Changing sign_in_audience for existing applications When updating an existing application to use a sign_in_audience value of AzureADandPersonalMicrosoftAccount or PersonalMicrosoftAccount, your configuration may no longer be valid. Refer to official documentation to understand the differences in supported configurations. Where possible, the provider will attempt to validate your configuration and try to avoid applying unsupported settings to your application.
single_page_application ApplicationSinglePageApplicationArgs: A single_page_application block as documented below, which configures single-page application (SPA) related settings for this application.
support_url str: URL of the application's support page.
tags Sequence[str]: A set of tags to apply to the application for configuring specific behaviours of the application and linked service principals. Note that these are not provided for use by practitioners. Cannot be used together with the feature_tags block.
Tags and Features Azure Active Directory uses special tag values to configure the behavior of applications. These can be specified using either the tags property or with the feature_tags block. If you need to set any custom tag values not supported by the feature_tags block, it's recommended to use the tags property. Tag values also propagate to any linked service principals.
template_id str: Unique ID for a templated application in the Azure AD App Gallery, from which to create the application. Changing this forces a new resource to be created.
terms_of_service_url str: URL of the application's terms of service statement.
web ApplicationWebArgs: A web block as documented below, which configures web related settings for this application.
Application Name Uniqueness Application names are not unique within Azure Active Directory. Use the prevent_duplicate_names argument to check for existing applications if you want to avoid name collisions.

api Property Map: An api block as documented below, which configures API related settings for this application.
appRoleIds Map<String>: A mapping of app role values to app role IDs, intended to be useful when referencing app roles in other resources in your configuration.
appRoles List<Property Map>: A collection of app_role blocks as documented below. For more information see official documentation on Application Roles.
applicationId String: The Application ID (also called Client ID).
description String: A description of the application, as shown to end users.
deviceOnlyAuthEnabled Boolean: Specifies whether this application supports device authentication without a user. Defaults to false.
disabledByMicrosoft String: Whether Microsoft has disabled the registered application. If the application is disabled, this will be a string indicating the status/reason, e.g. DisabledDueToViolationOfServicesAgreement
displayName String: The display name for the application.
fallbackPublicClientEnabled Boolean: Specifies whether the application is a public client. Appropriate for apps using token grant flows that don't use a redirect URI. Defaults to false.
featureTags List<Property Map>: A feature_tags block as described below. Cannot be used together with the tags property.
Features and Tags Features are configured for an application using tags, and are provided as a shortcut to set the corresponding magic tag value for each feature. You cannot configure feature_tags and tags for an application at the same time, so if you need to assign additional custom tags it's recommended to use the tags property instead. Tag values also propagate to any linked service principals.
groupMembershipClaims List<String>: Configures the groups claim issued in a user or OAuth 2.0 access token that the app expects. Possible values are None, SecurityGroup, DirectoryRole, ApplicationGroup or All.
identifierUris List<String>: A set of user-defined URI(s) that uniquely identify an application within its Azure AD tenant, or within a verified custom domain if the application is multi-tenant.
logoImage String: A logo image to upload for the application, as a raw base64-encoded string. The image should be in gif, jpeg or png format. Note that once an image has been uploaded, it is not possible to remove it without replacing it with another image.
logoUrl String: CDN URL to the application's logo, as uploaded with the logo_image property.
marketingUrl String: URL of the application's marketing page.
notes String: User-specified notes relevant for the management of the application.
oauth2PermissionScopeIds Map<String>: A mapping of OAuth2.0 permission scope values to scope IDs, intended to be useful when referencing permission scopes in other resources in your configuration.
oauth2PostResponseRequired Boolean: Specifies whether, as part of OAuth 2.0 token requests, Azure AD allows POST requests, as opposed to GET requests. Defaults to false, which specifies that only GET requests are allowed.
objectId String: The application's object ID.
optionalClaims Property Map: An optional_claims block as documented below.
owners List<String>: A list of object IDs of principals that will be granted ownership of the application
preventDuplicateNames Boolean: If true, will return an error if an existing application is found with the same name. Defaults to false.
privacyStatementUrl String: URL of the application's privacy statement.
publicClient Property Map: A public_client block as documented below, which configures non-web app or non-web API application settings, for example mobile or other public clients such as an installed application running on a desktop device.
publisherDomain String: The verified publisher domain for the application.
requiredResourceAccesses List<Property Map>: A collection of required_resource_access blocks as documented below.
serviceManagementReference String: References application context information from a Service or Asset Management database.
signInAudience String: The Microsoft account types that are supported for the current application. Must be one of AzureADMyOrg, AzureADMultipleOrgs, AzureADandPersonalMicrosoftAccount or PersonalMicrosoftAccount. Defaults to AzureADMyOrg.
Changing sign_in_audience for existing applications When updating an existing application to use a sign_in_audience value of AzureADandPersonalMicrosoftAccount or PersonalMicrosoftAccount, your configuration may no longer be valid. Refer to official documentation to understand the differences in supported configurations. Where possible, the provider will attempt to validate your configuration and try to avoid applying unsupported settings to your application.
singlePageApplication Property Map: A single_page_application block as documented below, which configures single-page application (SPA) related settings for this application.
supportUrl String: URL of the application's support page.
tags List<String>: A set of tags to apply to the application for configuring specific behaviours of the application and linked service principals. Note that these are not provided for use by practitioners. Cannot be used together with the feature_tags block.
Tags and Features Azure Active Directory uses special tag values to configure the behavior of applications. These can be specified using either the tags property or with the feature_tags block. If you need to set any custom tag values not supported by the feature_tags block, it's recommended to use the tags property. Tag values also propagate to any linked service principals.
templateId String: Unique ID for a templated application in the Azure AD App Gallery, from which to create the application. Changing this forces a new resource to be created.
termsOfServiceUrl String: URL of the application's terms of service statement.
web Property Map: A web block as documented below, which configures web related settings for this application.
Application Name Uniqueness Application names are not unique within Azure Active Directory. Use the prevent_duplicate_names argument to check for existing applications if you want to avoid name collisions.

Supporting Types

ApplicationApi, ApplicationApiArgs

KnownClientApplications List<string>: A set of application IDs (client IDs), used for bundling consent if you have a solution that contains two parts: a client app and a custom web API app.
MappedClaimsEnabled bool: Allows an application to use claims mapping without specifying a custom signing key. Defaults to false.
Oauth2PermissionScopes List<Pulumi.AzureAD.Inputs.ApplicationApiOauth2PermissionScope>: One or more oauth2_permission_scope blocks as documented below, to describe delegated permissions exposed by the web API represented by this application.
RequestedAccessTokenVersion int: The access token version expected by this resource. Must be one of 1 or 2, and must be 2 when sign_in_audience is either AzureADandPersonalMicrosoftAccount or PersonalMicrosoftAccount Defaults to 1.

KnownClientApplications []string: A set of application IDs (client IDs), used for bundling consent if you have a solution that contains two parts: a client app and a custom web API app.
MappedClaimsEnabled bool: Allows an application to use claims mapping without specifying a custom signing key. Defaults to false.
Oauth2PermissionScopes []ApplicationApiOauth2PermissionScope: One or more oauth2_permission_scope blocks as documented below, to describe delegated permissions exposed by the web API represented by this application.
RequestedAccessTokenVersion int: The access token version expected by this resource. Must be one of 1 or 2, and must be 2 when sign_in_audience is either AzureADandPersonalMicrosoftAccount or PersonalMicrosoftAccount Defaults to 1.

knownClientApplications List<String>: A set of application IDs (client IDs), used for bundling consent if you have a solution that contains two parts: a client app and a custom web API app.
mappedClaimsEnabled Boolean: Allows an application to use claims mapping without specifying a custom signing key. Defaults to false.
oauth2PermissionScopes List<ApplicationApiOauth2PermissionScope>: One or more oauth2_permission_scope blocks as documented below, to describe delegated permissions exposed by the web API represented by this application.
requestedAccessTokenVersion Integer: The access token version expected by this resource. Must be one of 1 or 2, and must be 2 when sign_in_audience is either AzureADandPersonalMicrosoftAccount or PersonalMicrosoftAccount Defaults to 1.

knownClientApplications string[]: A set of application IDs (client IDs), used for bundling consent if you have a solution that contains two parts: a client app and a custom web API app.
mappedClaimsEnabled boolean: Allows an application to use claims mapping without specifying a custom signing key. Defaults to false.
oauth2PermissionScopes ApplicationApiOauth2PermissionScope[]: One or more oauth2_permission_scope blocks as documented below, to describe delegated permissions exposed by the web API represented by this application.
requestedAccessTokenVersion number: The access token version expected by this resource. Must be one of 1 or 2, and must be 2 when sign_in_audience is either AzureADandPersonalMicrosoftAccount or PersonalMicrosoftAccount Defaults to 1.

known_client_applications Sequence[str]: A set of application IDs (client IDs), used for bundling consent if you have a solution that contains two parts: a client app and a custom web API app.
mapped_claims_enabled bool: Allows an application to use claims mapping without specifying a custom signing key. Defaults to false.
oauth2_permission_scopes Sequence[ApplicationApiOauth2PermissionScope]: One or more oauth2_permission_scope blocks as documented below, to describe delegated permissions exposed by the web API represented by this application.
requested_access_token_version int: The access token version expected by this resource. Must be one of 1 or 2, and must be 2 when sign_in_audience is either AzureADandPersonalMicrosoftAccount or PersonalMicrosoftAccount Defaults to 1.

knownClientApplications List<String>: A set of application IDs (client IDs), used for bundling consent if you have a solution that contains two parts: a client app and a custom web API app.
mappedClaimsEnabled Boolean: Allows an application to use claims mapping without specifying a custom signing key. Defaults to false.
oauth2PermissionScopes List<Property Map>: One or more oauth2_permission_scope blocks as documented below, to describe delegated permissions exposed by the web API represented by this application.
requestedAccessTokenVersion Number: The access token version expected by this resource. Must be one of 1 or 2, and must be 2 when sign_in_audience is either AzureADandPersonalMicrosoftAccount or PersonalMicrosoftAccount Defaults to 1.

ApplicationApiOauth2PermissionScope, ApplicationApiOauth2PermissionScopeArgs

Id string
AdminConsentDescription string: Delegated permission description that appears in all tenant-wide admin consent experiences, intended to be read by an administrator granting the permission on behalf of all users.
AdminConsentDisplayName string: Display name for the delegated permission, intended to be read by an administrator granting the permission on behalf of all users.
Enabled bool: Determines if the permission scope is enabled. Defaults to true.
Type string: Whether this delegated permission should be considered safe for non-admin users to consent to on behalf of themselves, or whether an administrator should be required for consent to the permissions. Defaults to User. Possible values are User or Admin.
UserConsentDescription string: Delegated permission description that appears in the end user consent experience, intended to be read by a user consenting on their own behalf.
UserConsentDisplayName string: Display name for the delegated permission that appears in the end user consent experience.
Value string

Id string
AdminConsentDescription string: Delegated permission description that appears in all tenant-wide admin consent experiences, intended to be read by an administrator granting the permission on behalf of all users.
AdminConsentDisplayName string: Display name for the delegated permission, intended to be read by an administrator granting the permission on behalf of all users.
Enabled bool: Determines if the permission scope is enabled. Defaults to true.
Type string: Whether this delegated permission should be considered safe for non-admin users to consent to on behalf of themselves, or whether an administrator should be required for consent to the permissions. Defaults to User. Possible values are User or Admin.
UserConsentDescription string: Delegated permission description that appears in the end user consent experience, intended to be read by a user consenting on their own behalf.
UserConsentDisplayName string: Display name for the delegated permission that appears in the end user consent experience.
Value string

id String
adminConsentDescription String: Delegated permission description that appears in all tenant-wide admin consent experiences, intended to be read by an administrator granting the permission on behalf of all users.
adminConsentDisplayName String: Display name for the delegated permission, intended to be read by an administrator granting the permission on behalf of all users.
enabled Boolean: Determines if the permission scope is enabled. Defaults to true.
type String: Whether this delegated permission should be considered safe for non-admin users to consent to on behalf of themselves, or whether an administrator should be required for consent to the permissions. Defaults to User. Possible values are User or Admin.
userConsentDescription String: Delegated permission description that appears in the end user consent experience, intended to be read by a user consenting on their own behalf.
userConsentDisplayName String: Display name for the delegated permission that appears in the end user consent experience.
value String

id string
adminConsentDescription string: Delegated permission description that appears in all tenant-wide admin consent experiences, intended to be read by an administrator granting the permission on behalf of all users.
adminConsentDisplayName string: Display name for the delegated permission, intended to be read by an administrator granting the permission on behalf of all users.
enabled boolean: Determines if the permission scope is enabled. Defaults to true.
type string: Whether this delegated permission should be considered safe for non-admin users to consent to on behalf of themselves, or whether an administrator should be required for consent to the permissions. Defaults to User. Possible values are User or Admin.
userConsentDescription string: Delegated permission description that appears in the end user consent experience, intended to be read by a user consenting on their own behalf.
userConsentDisplayName string: Display name for the delegated permission that appears in the end user consent experience.
value string

id str
admin_consent_description str: Delegated permission description that appears in all tenant-wide admin consent experiences, intended to be read by an administrator granting the permission on behalf of all users.
admin_consent_display_name str: Display name for the delegated permission, intended to be read by an administrator granting the permission on behalf of all users.
enabled bool: Determines if the permission scope is enabled. Defaults to true.
type str: Whether this delegated permission should be considered safe for non-admin users to consent to on behalf of themselves, or whether an administrator should be required for consent to the permissions. Defaults to User. Possible values are User or Admin.
user_consent_description str: Delegated permission description that appears in the end user consent experience, intended to be read by a user consenting on their own behalf.
user_consent_display_name str: Display name for the delegated permission that appears in the end user consent experience.
value str

id String
adminConsentDescription String: Delegated permission description that appears in all tenant-wide admin consent experiences, intended to be read by an administrator granting the permission on behalf of all users.
adminConsentDisplayName String: Display name for the delegated permission, intended to be read by an administrator granting the permission on behalf of all users.
enabled Boolean: Determines if the permission scope is enabled. Defaults to true.
type String: Whether this delegated permission should be considered safe for non-admin users to consent to on behalf of themselves, or whether an administrator should be required for consent to the permissions. Defaults to User. Possible values are User or Admin.
userConsentDescription String: Delegated permission description that appears in the end user consent experience, intended to be read by a user consenting on their own behalf.
userConsentDisplayName String: Display name for the delegated permission that appears in the end user consent experience.
value String

ApplicationAppRole, ApplicationAppRoleArgs

AllowedMemberTypes List<string>: Specifies whether this app role definition can be assigned to users and groups by setting to User, or to other applications (that are accessing this application in a standalone scenario) by setting to Application, or to both.
Description string: Description of the app role that appears when the role is being assigned and, if the role functions as an application permissions, during the consent experiences.
DisplayName string: Display name for the app role that appears during app role assignment and in consent experiences.
Id string
Enabled bool: Determines if the app role is enabled. Defaults to true.
Value string

AllowedMemberTypes []string: Specifies whether this app role definition can be assigned to users and groups by setting to User, or to other applications (that are accessing this application in a standalone scenario) by setting to Application, or to both.
Description string: Description of the app role that appears when the role is being assigned and, if the role functions as an application permissions, during the consent experiences.
DisplayName string: Display name for the app role that appears during app role assignment and in consent experiences.
Id string
Enabled bool: Determines if the app role is enabled. Defaults to true.
Value string

allowedMemberTypes List<String>: Specifies whether this app role definition can be assigned to users and groups by setting to User, or to other applications (that are accessing this application in a standalone scenario) by setting to Application, or to both.
description String: Description of the app role that appears when the role is being assigned and, if the role functions as an application permissions, during the consent experiences.
displayName String: Display name for the app role that appears during app role assignment and in consent experiences.
id String
enabled Boolean: Determines if the app role is enabled. Defaults to true.
value String

allowedMemberTypes string[]: Specifies whether this app role definition can be assigned to users and groups by setting to User, or to other applications (that are accessing this application in a standalone scenario) by setting to Application, or to both.
description string: Description of the app role that appears when the role is being assigned and, if the role functions as an application permissions, during the consent experiences.
displayName string: Display name for the app role that appears during app role assignment and in consent experiences.
id string
enabled boolean: Determines if the app role is enabled. Defaults to true.
value string

allowed_member_types Sequence[str]: Specifies whether this app role definition can be assigned to users and groups by setting to User, or to other applications (that are accessing this application in a standalone scenario) by setting to Application, or to both.
description str: Description of the app role that appears when the role is being assigned and, if the role functions as an application permissions, during the consent experiences.
display_name str: Display name for the app role that appears during app role assignment and in consent experiences.
id str
enabled bool: Determines if the app role is enabled. Defaults to true.
value str

allowedMemberTypes List<String>: Specifies whether this app role definition can be assigned to users and groups by setting to User, or to other applications (that are accessing this application in a standalone scenario) by setting to Application, or to both.
description String: Description of the app role that appears when the role is being assigned and, if the role functions as an application permissions, during the consent experiences.
displayName String: Display name for the app role that appears during app role assignment and in consent experiences.
id String
enabled Boolean: Determines if the app role is enabled. Defaults to true.
value String

ApplicationFeatureTag, ApplicationFeatureTagArgs

CustomSingleSignOn bool: Whether this application represents a custom SAML application for linked service principals. Enabling this will assign the WindowsAzureActiveDirectoryCustomSingleSignOnApplication tag. Defaults to false.
Enterprise bool: Whether this application represents an Enterprise Application for linked service principals. Enabling this will assign the WindowsAzureActiveDirectoryIntegratedApp tag. Defaults to false.
Gallery bool: Whether this application represents a gallery application for linked service principals. Enabling this will assign the WindowsAzureActiveDirectoryGalleryApplicationNonPrimaryV1 tag. Defaults to false.
Hide bool: Whether this app is invisible to users in My Apps and Office 365 Launcher. Enabling this will assign the HideApp tag. Defaults to false.

CustomSingleSignOn bool: Whether this application represents a custom SAML application for linked service principals. Enabling this will assign the WindowsAzureActiveDirectoryCustomSingleSignOnApplication tag. Defaults to false.
Enterprise bool: Whether this application represents an Enterprise Application for linked service principals. Enabling this will assign the WindowsAzureActiveDirectoryIntegratedApp tag. Defaults to false.
Gallery bool: Whether this application represents a gallery application for linked service principals. Enabling this will assign the WindowsAzureActiveDirectoryGalleryApplicationNonPrimaryV1 tag. Defaults to false.
Hide bool: Whether this app is invisible to users in My Apps and Office 365 Launcher. Enabling this will assign the HideApp tag. Defaults to false.

customSingleSignOn Boolean: Whether this application represents a custom SAML application for linked service principals. Enabling this will assign the WindowsAzureActiveDirectoryCustomSingleSignOnApplication tag. Defaults to false.
enterprise Boolean: Whether this application represents an Enterprise Application for linked service principals. Enabling this will assign the WindowsAzureActiveDirectoryIntegratedApp tag. Defaults to false.
gallery Boolean: Whether this application represents a gallery application for linked service principals. Enabling this will assign the WindowsAzureActiveDirectoryGalleryApplicationNonPrimaryV1 tag. Defaults to false.
hide Boolean: Whether this app is invisible to users in My Apps and Office 365 Launcher. Enabling this will assign the HideApp tag. Defaults to false.

customSingleSignOn boolean: Whether this application represents a custom SAML application for linked service principals. Enabling this will assign the WindowsAzureActiveDirectoryCustomSingleSignOnApplication tag. Defaults to false.
enterprise boolean: Whether this application represents an Enterprise Application for linked service principals. Enabling this will assign the WindowsAzureActiveDirectoryIntegratedApp tag. Defaults to false.
gallery boolean: Whether this application represents a gallery application for linked service principals. Enabling this will assign the WindowsAzureActiveDirectoryGalleryApplicationNonPrimaryV1 tag. Defaults to false.
hide boolean: Whether this app is invisible to users in My Apps and Office 365 Launcher. Enabling this will assign the HideApp tag. Defaults to false.

custom_single_sign_on bool: Whether this application represents a custom SAML application for linked service principals. Enabling this will assign the WindowsAzureActiveDirectoryCustomSingleSignOnApplication tag. Defaults to false.
enterprise bool: Whether this application represents an Enterprise Application for linked service principals. Enabling this will assign the WindowsAzureActiveDirectoryIntegratedApp tag. Defaults to false.
gallery bool: Whether this application represents a gallery application for linked service principals. Enabling this will assign the WindowsAzureActiveDirectoryGalleryApplicationNonPrimaryV1 tag. Defaults to false.
hide bool: Whether this app is invisible to users in My Apps and Office 365 Launcher. Enabling this will assign the HideApp tag. Defaults to false.

customSingleSignOn Boolean: Whether this application represents a custom SAML application for linked service principals. Enabling this will assign the WindowsAzureActiveDirectoryCustomSingleSignOnApplication tag. Defaults to false.
enterprise Boolean: Whether this application represents an Enterprise Application for linked service principals. Enabling this will assign the WindowsAzureActiveDirectoryIntegratedApp tag. Defaults to false.
gallery Boolean: Whether this application represents a gallery application for linked service principals. Enabling this will assign the WindowsAzureActiveDirectoryGalleryApplicationNonPrimaryV1 tag. Defaults to false.
hide Boolean: Whether this app is invisible to users in My Apps and Office 365 Launcher. Enabling this will assign the HideApp tag. Defaults to false.

ApplicationOptionalClaims, ApplicationOptionalClaimsArgs

AccessTokens List<Pulumi.AzureAD.Inputs.ApplicationOptionalClaimsAccessToken>: One or more access_token blocks as documented below.
IdTokens List<Pulumi.AzureAD.Inputs.ApplicationOptionalClaimsIdToken>: One or more id_token blocks as documented below.
Saml2Tokens List<Pulumi.AzureAD.Inputs.ApplicationOptionalClaimsSaml2Token>: One or more saml2_token blocks as documented below.

AccessTokens []ApplicationOptionalClaimsAccessToken: One or more access_token blocks as documented below.
IdTokens []ApplicationOptionalClaimsIdToken: One or more id_token blocks as documented below.
Saml2Tokens []ApplicationOptionalClaimsSaml2Token: One or more saml2_token blocks as documented below.

accessTokens List<ApplicationOptionalClaimsAccessToken>: One or more access_token blocks as documented below.
idTokens List<ApplicationOptionalClaimsIdToken>: One or more id_token blocks as documented below.
saml2Tokens List<ApplicationOptionalClaimsSaml2Token>: One or more saml2_token blocks as documented below.

accessTokens ApplicationOptionalClaimsAccessToken[]: One or more access_token blocks as documented below.
idTokens ApplicationOptionalClaimsIdToken[]: One or more id_token blocks as documented below.
saml2Tokens ApplicationOptionalClaimsSaml2Token[]: One or more saml2_token blocks as documented below.

access_tokens Sequence[ApplicationOptionalClaimsAccessToken]: One or more access_token blocks as documented below.
id_tokens Sequence[ApplicationOptionalClaimsIdToken]: One or more id_token blocks as documented below.
saml2_tokens Sequence[ApplicationOptionalClaimsSaml2Token]: One or more saml2_token blocks as documented below.

accessTokens List<Property Map>: One or more access_token blocks as documented below.
idTokens List<Property Map>: One or more id_token blocks as documented below.
saml2Tokens List<Property Map>: One or more saml2_token blocks as documented below.

ApplicationOptionalClaimsAccessToken, ApplicationOptionalClaimsAccessTokenArgs

Name string: The name of the optional claim.
AdditionalProperties List<string>: List of additional properties of the claim. If a property exists in this list, it modifies the behaviour of the optional claim.
Essential bool: Whether the claim specified by the client is necessary to ensure a smooth authorization experience.
Source string: The source of the claim. If source is absent, the claim is a predefined optional claim. If source is user, the value of name is the extension property from the user object.

Name string: The name of the optional claim.
AdditionalProperties []string: List of additional properties of the claim. If a property exists in this list, it modifies the behaviour of the optional claim.
Essential bool: Whether the claim specified by the client is necessary to ensure a smooth authorization experience.
Source string: The source of the claim. If source is absent, the claim is a predefined optional claim. If source is user, the value of name is the extension property from the user object.

name String: The name of the optional claim.
additionalProperties List<String>: List of additional properties of the claim. If a property exists in this list, it modifies the behaviour of the optional claim.
essential Boolean: Whether the claim specified by the client is necessary to ensure a smooth authorization experience.
source String: The source of the claim. If source is absent, the claim is a predefined optional claim. If source is user, the value of name is the extension property from the user object.

name string: The name of the optional claim.
additionalProperties string[]: List of additional properties of the claim. If a property exists in this list, it modifies the behaviour of the optional claim.
essential boolean: Whether the claim specified by the client is necessary to ensure a smooth authorization experience.
source string: The source of the claim. If source is absent, the claim is a predefined optional claim. If source is user, the value of name is the extension property from the user object.

name str: The name of the optional claim.
additional_properties Sequence[str]: List of additional properties of the claim. If a property exists in this list, it modifies the behaviour of the optional claim.
essential bool: Whether the claim specified by the client is necessary to ensure a smooth authorization experience.
source str: The source of the claim. If source is absent, the claim is a predefined optional claim. If source is user, the value of name is the extension property from the user object.

name String: The name of the optional claim.
additionalProperties List<String>: List of additional properties of the claim. If a property exists in this list, it modifies the behaviour of the optional claim.
essential Boolean: Whether the claim specified by the client is necessary to ensure a smooth authorization experience.
source String: The source of the claim. If source is absent, the claim is a predefined optional claim. If source is user, the value of name is the extension property from the user object.

ApplicationOptionalClaimsIdToken, ApplicationOptionalClaimsIdTokenArgs

Name string: The name of the optional claim.
AdditionalProperties List<string>: List of additional properties of the claim. If a property exists in this list, it modifies the behaviour of the optional claim.
Essential bool: Whether the claim specified by the client is necessary to ensure a smooth authorization experience.
Source string: The source of the claim. If source is absent, the claim is a predefined optional claim. If source is user, the value of name is the extension property from the user object.

Name string: The name of the optional claim.
AdditionalProperties []string: List of additional properties of the claim. If a property exists in this list, it modifies the behaviour of the optional claim.
Essential bool: Whether the claim specified by the client is necessary to ensure a smooth authorization experience.
Source string: The source of the claim. If source is absent, the claim is a predefined optional claim. If source is user, the value of name is the extension property from the user object.

name String: The name of the optional claim.
additionalProperties List<String>: List of additional properties of the claim. If a property exists in this list, it modifies the behaviour of the optional claim.
essential Boolean: Whether the claim specified by the client is necessary to ensure a smooth authorization experience.
source String: The source of the claim. If source is absent, the claim is a predefined optional claim. If source is user, the value of name is the extension property from the user object.

name string: The name of the optional claim.
additionalProperties string[]: List of additional properties of the claim. If a property exists in this list, it modifies the behaviour of the optional claim.
essential boolean: Whether the claim specified by the client is necessary to ensure a smooth authorization experience.
source string: The source of the claim. If source is absent, the claim is a predefined optional claim. If source is user, the value of name is the extension property from the user object.

name str: The name of the optional claim.
additional_properties Sequence[str]: List of additional properties of the claim. If a property exists in this list, it modifies the behaviour of the optional claim.
essential bool: Whether the claim specified by the client is necessary to ensure a smooth authorization experience.
source str: The source of the claim. If source is absent, the claim is a predefined optional claim. If source is user, the value of name is the extension property from the user object.

name String: The name of the optional claim.
additionalProperties List<String>: List of additional properties of the claim. If a property exists in this list, it modifies the behaviour of the optional claim.
essential Boolean: Whether the claim specified by the client is necessary to ensure a smooth authorization experience.
source String: The source of the claim. If source is absent, the claim is a predefined optional claim. If source is user, the value of name is the extension property from the user object.

ApplicationOptionalClaimsSaml2Token, ApplicationOptionalClaimsSaml2TokenArgs

Name string: The name of the optional claim.
AdditionalProperties List<string>: List of additional properties of the claim. If a property exists in this list, it modifies the behaviour of the optional claim.
Essential bool: Whether the claim specified by the client is necessary to ensure a smooth authorization experience.
Source string: The source of the claim. If source is absent, the claim is a predefined optional claim. If source is user, the value of name is the extension property from the user object.

Name string: The name of the optional claim.
AdditionalProperties []string: List of additional properties of the claim. If a property exists in this list, it modifies the behaviour of the optional claim.
Essential bool: Whether the claim specified by the client is necessary to ensure a smooth authorization experience.
Source string: The source of the claim. If source is absent, the claim is a predefined optional claim. If source is user, the value of name is the extension property from the user object.

name String: The name of the optional claim.
additionalProperties List<String>: List of additional properties of the claim. If a property exists in this list, it modifies the behaviour of the optional claim.
essential Boolean: Whether the claim specified by the client is necessary to ensure a smooth authorization experience.
source String: The source of the claim. If source is absent, the claim is a predefined optional claim. If source is user, the value of name is the extension property from the user object.

name string: The name of the optional claim.
additionalProperties string[]: List of additional properties of the claim. If a property exists in this list, it modifies the behaviour of the optional claim.
essential boolean: Whether the claim specified by the client is necessary to ensure a smooth authorization experience.
source string: The source of the claim. If source is absent, the claim is a predefined optional claim. If source is user, the value of name is the extension property from the user object.

name str: The name of the optional claim.
additional_properties Sequence[str]: List of additional properties of the claim. If a property exists in this list, it modifies the behaviour of the optional claim.
essential bool: Whether the claim specified by the client is necessary to ensure a smooth authorization experience.
source str: The source of the claim. If source is absent, the claim is a predefined optional claim. If source is user, the value of name is the extension property from the user object.

name String: The name of the optional claim.
additionalProperties List<String>: List of additional properties of the claim. If a property exists in this list, it modifies the behaviour of the optional claim.
essential Boolean: Whether the claim specified by the client is necessary to ensure a smooth authorization experience.
source String: The source of the claim. If source is absent, the claim is a predefined optional claim. If source is user, the value of name is the extension property from the user object.

ApplicationPublicClient, ApplicationPublicClientArgs

RedirectUris List<string>: A set of URLs where user tokens are sent for sign-in, or the redirect URIs where OAuth 2.0 authorization codes and access tokens are sent. Must be a valid https or ms-appx-web URL.

RedirectUris []string: A set of URLs where user tokens are sent for sign-in, or the redirect URIs where OAuth 2.0 authorization codes and access tokens are sent. Must be a valid https or ms-appx-web URL.

redirectUris List<String>: A set of URLs where user tokens are sent for sign-in, or the redirect URIs where OAuth 2.0 authorization codes and access tokens are sent. Must be a valid https or ms-appx-web URL.

redirectUris string[]: A set of URLs where user tokens are sent for sign-in, or the redirect URIs where OAuth 2.0 authorization codes and access tokens are sent. Must be a valid https or ms-appx-web URL.

redirect_uris Sequence[str]: A set of URLs where user tokens are sent for sign-in, or the redirect URIs where OAuth 2.0 authorization codes and access tokens are sent. Must be a valid https or ms-appx-web URL.

redirectUris List<String>: A set of URLs where user tokens are sent for sign-in, or the redirect URIs where OAuth 2.0 authorization codes and access tokens are sent. Must be a valid https or ms-appx-web URL.

ApplicationRequiredResourceAccess, ApplicationRequiredResourceAccessArgs

ResourceAccesses List<Pulumi.AzureAD.Inputs.ApplicationRequiredResourceAccessResourceAccess>: A collection of resource_access blocks as documented below, describing OAuth2.0 permission scopes and app roles that the application requires from the specified resource.
ResourceAppId string: The unique identifier for the resource that the application requires access to. This should be the Application ID of the target application.
Note: Documentation on resource_app_id values for Microsoft APIs can be difficult to find, but you can use the Azure CLI to find them. (e.g. az ad sp list --display-name "Microsoft Graph" --query '[].{appDisplayName:appDisplayName, appId:appId}')

ResourceAccesses []ApplicationRequiredResourceAccessResourceAccess: A collection of resource_access blocks as documented below, describing OAuth2.0 permission scopes and app roles that the application requires from the specified resource.
ResourceAppId string: The unique identifier for the resource that the application requires access to. This should be the Application ID of the target application.
Note: Documentation on resource_app_id values for Microsoft APIs can be difficult to find, but you can use the Azure CLI to find them. (e.g. az ad sp list --display-name "Microsoft Graph" --query '[].{appDisplayName:appDisplayName, appId:appId}')

resourceAccesses List<ApplicationRequiredResourceAccessResourceAccess>: A collection of resource_access blocks as documented below, describing OAuth2.0 permission scopes and app roles that the application requires from the specified resource.
resourceAppId String: The unique identifier for the resource that the application requires access to. This should be the Application ID of the target application.
Note: Documentation on resource_app_id values for Microsoft APIs can be difficult to find, but you can use the Azure CLI to find them. (e.g. az ad sp list --display-name "Microsoft Graph" --query '[].{appDisplayName:appDisplayName, appId:appId}')

resourceAccesses ApplicationRequiredResourceAccessResourceAccess[]: A collection of resource_access blocks as documented below, describing OAuth2.0 permission scopes and app roles that the application requires from the specified resource.
resourceAppId string: The unique identifier for the resource that the application requires access to. This should be the Application ID of the target application.
Note: Documentation on resource_app_id values for Microsoft APIs can be difficult to find, but you can use the Azure CLI to find them. (e.g. az ad sp list --display-name "Microsoft Graph" --query '[].{appDisplayName:appDisplayName, appId:appId}')

resource_accesses Sequence[ApplicationRequiredResourceAccessResourceAccess]: A collection of resource_access blocks as documented below, describing OAuth2.0 permission scopes and app roles that the application requires from the specified resource.
resource_app_id str: The unique identifier for the resource that the application requires access to. This should be the Application ID of the target application.
Note: Documentation on resource_app_id values for Microsoft APIs can be difficult to find, but you can use the Azure CLI to find them. (e.g. az ad sp list --display-name "Microsoft Graph" --query '[].{appDisplayName:appDisplayName, appId:appId}')

resourceAccesses List<Property Map>: A collection of resource_access blocks as documented below, describing OAuth2.0 permission scopes and app roles that the application requires from the specified resource.
resourceAppId String: The unique identifier for the resource that the application requires access to. This should be the Application ID of the target application.
Note: Documentation on resource_app_id values for Microsoft APIs can be difficult to find, but you can use the Azure CLI to find them. (e.g. az ad sp list --display-name "Microsoft Graph" --query '[].{appDisplayName:appDisplayName, appId:appId}')

ApplicationRequiredResourceAccessResourceAccess, ApplicationRequiredResourceAccessResourceAccessArgs

Id string: The unique identifier for an app role or OAuth2 permission scope published by the resource application.
Type string: Specifies whether the id property references an app role or an OAuth2 permission scope. Possible values are Role or Scope.

Id string: The unique identifier for an app role or OAuth2 permission scope published by the resource application.
Type string: Specifies whether the id property references an app role or an OAuth2 permission scope. Possible values are Role or Scope.

id String: The unique identifier for an app role or OAuth2 permission scope published by the resource application.
type String: Specifies whether the id property references an app role or an OAuth2 permission scope. Possible values are Role or Scope.

id string: The unique identifier for an app role or OAuth2 permission scope published by the resource application.
type string: Specifies whether the id property references an app role or an OAuth2 permission scope. Possible values are Role or Scope.

id str: The unique identifier for an app role or OAuth2 permission scope published by the resource application.
type str: Specifies whether the id property references an app role or an OAuth2 permission scope. Possible values are Role or Scope.

id String: The unique identifier for an app role or OAuth2 permission scope published by the resource application.
type String: Specifies whether the id property references an app role or an OAuth2 permission scope. Possible values are Role or Scope.

ApplicationSinglePageApplication, ApplicationSinglePageApplicationArgs

RedirectUris List<string>: A set of URLs where user tokens are sent for sign-in, or the redirect URIs where OAuth 2.0 authorization codes and access tokens are sent. Must be a valid https URL.

RedirectUris []string: A set of URLs where user tokens are sent for sign-in, or the redirect URIs where OAuth 2.0 authorization codes and access tokens are sent. Must be a valid https URL.

redirectUris List<String>: A set of URLs where user tokens are sent for sign-in, or the redirect URIs where OAuth 2.0 authorization codes and access tokens are sent. Must be a valid https URL.

redirectUris string[]: A set of URLs where user tokens are sent for sign-in, or the redirect URIs where OAuth 2.0 authorization codes and access tokens are sent. Must be a valid https URL.

redirect_uris Sequence[str]: A set of URLs where user tokens are sent for sign-in, or the redirect URIs where OAuth 2.0 authorization codes and access tokens are sent. Must be a valid https URL.

redirectUris List<String>: A set of URLs where user tokens are sent for sign-in, or the redirect URIs where OAuth 2.0 authorization codes and access tokens are sent. Must be a valid https URL.

ApplicationWeb, ApplicationWebArgs

HomepageUrl string: Home page or landing page of the application.
ImplicitGrant Pulumi.AzureAD.Inputs.ApplicationWebImplicitGrant: An implicit_grant block as documented above.
LogoutUrl string: The URL that will be used by Microsoft's authorization service to sign out a user using front-channel, back-channel or SAML logout protocols.
RedirectUris List<string>: A set of URLs where user tokens are sent for sign-in, or the redirect URIs where OAuth 2.0 authorization codes and access tokens are sent. Must be a valid http URL or a URN.

HomepageUrl string: Home page or landing page of the application.
ImplicitGrant ApplicationWebImplicitGrant: An implicit_grant block as documented above.
LogoutUrl string: The URL that will be used by Microsoft's authorization service to sign out a user using front-channel, back-channel or SAML logout protocols.
RedirectUris []string: A set of URLs where user tokens are sent for sign-in, or the redirect URIs where OAuth 2.0 authorization codes and access tokens are sent. Must be a valid http URL or a URN.

homepageUrl String: Home page or landing page of the application.
implicitGrant ApplicationWebImplicitGrant: An implicit_grant block as documented above.
logoutUrl String: The URL that will be used by Microsoft's authorization service to sign out a user using front-channel, back-channel or SAML logout protocols.
redirectUris List<String>: A set of URLs where user tokens are sent for sign-in, or the redirect URIs where OAuth 2.0 authorization codes and access tokens are sent. Must be a valid http URL or a URN.

homepageUrl string: Home page or landing page of the application.
implicitGrant ApplicationWebImplicitGrant: An implicit_grant block as documented above.
logoutUrl string: The URL that will be used by Microsoft's authorization service to sign out a user using front-channel, back-channel or SAML logout protocols.
redirectUris string[]: A set of URLs where user tokens are sent for sign-in, or the redirect URIs where OAuth 2.0 authorization codes and access tokens are sent. Must be a valid http URL or a URN.

homepage_url str: Home page or landing page of the application.
implicit_grant ApplicationWebImplicitGrant: An implicit_grant block as documented above.
logout_url str: The URL that will be used by Microsoft's authorization service to sign out a user using front-channel, back-channel or SAML logout protocols.
redirect_uris Sequence[str]: A set of URLs where user tokens are sent for sign-in, or the redirect URIs where OAuth 2.0 authorization codes and access tokens are sent. Must be a valid http URL or a URN.

homepageUrl String: Home page or landing page of the application.
implicitGrant Property Map: An implicit_grant block as documented above.
logoutUrl String: The URL that will be used by Microsoft's authorization service to sign out a user using front-channel, back-channel or SAML logout protocols.
redirectUris List<String>: A set of URLs where user tokens are sent for sign-in, or the redirect URIs where OAuth 2.0 authorization codes and access tokens are sent. Must be a valid http URL or a URN.

ApplicationWebImplicitGrant, ApplicationWebImplicitGrantArgs

AccessTokenIssuanceEnabled bool: Whether this web application can request an access token using OAuth 2.0 implicit flow.
IdTokenIssuanceEnabled bool: Whether this web application can request an ID token using OAuth 2.0 implicit flow.

AccessTokenIssuanceEnabled bool: Whether this web application can request an access token using OAuth 2.0 implicit flow.
IdTokenIssuanceEnabled bool: Whether this web application can request an ID token using OAuth 2.0 implicit flow.

accessTokenIssuanceEnabled Boolean: Whether this web application can request an access token using OAuth 2.0 implicit flow.
idTokenIssuanceEnabled Boolean: Whether this web application can request an ID token using OAuth 2.0 implicit flow.

accessTokenIssuanceEnabled boolean: Whether this web application can request an access token using OAuth 2.0 implicit flow.
idTokenIssuanceEnabled boolean: Whether this web application can request an ID token using OAuth 2.0 implicit flow.

access_token_issuance_enabled bool: Whether this web application can request an access token using OAuth 2.0 implicit flow.
id_token_issuance_enabled bool: Whether this web application can request an ID token using OAuth 2.0 implicit flow.

accessTokenIssuanceEnabled Boolean: Whether this web application can request an access token using OAuth 2.0 implicit flow.
idTokenIssuanceEnabled Boolean: Whether this web application can request an ID token using OAuth 2.0 implicit flow.

Package Details

Repository: Azure Active Directory (Azure AD) pulumi/pulumi-azuread
License: Apache-2.0
Notes: This Pulumi package is based on the azuread Terraform Provider.

Azure Active Directory (Azure AD) v5.42.0 published on Friday, Sep 22, 2023 by Pulumi

pulumi/pulumi-azuread

azuread.Application

On this page

On this page

Import

Example Usage

Create Application Resource

Application Resource Properties

Inputs

Outputs

Look up Existing Application Resource

Supporting Types

ApplicationApi, ApplicationApiArgs

ApplicationApiOauth2PermissionScope, ApplicationApiOauth2PermissionScopeArgs

ApplicationAppRole, ApplicationAppRoleArgs

ApplicationFeatureTag, ApplicationFeatureTagArgs

ApplicationOptionalClaims, ApplicationOptionalClaimsArgs

ApplicationOptionalClaimsAccessToken, ApplicationOptionalClaimsAccessTokenArgs

ApplicationOptionalClaimsIdToken, ApplicationOptionalClaimsIdTokenArgs

ApplicationOptionalClaimsSaml2Token, ApplicationOptionalClaimsSaml2TokenArgs

ApplicationPublicClient, ApplicationPublicClientArgs

ApplicationRequiredResourceAccess, ApplicationRequiredResourceAccessArgs

ApplicationRequiredResourceAccessResourceAccess, ApplicationRequiredResourceAccessResourceAccessArgs

ApplicationSinglePageApplication, ApplicationSinglePageApplicationArgs

ApplicationWeb, ApplicationWebArgs

ApplicationWebImplicitGrant, ApplicationWebImplicitGrantArgs

Package Details

On this page

On this page