AzureAD

Pulumi Official
Package maintained by Pulumi
v5.27.0 published on Wednesday, Aug 17, 2022 by Pulumi

getApplication

Use this data source to access information about an existing Application within Azure Active Directory.

API Permissions

The following API permissions are required in order to use this data source.

When authenticated with a service principal, this data source requires one of the following application roles: Application.Read.All or Directory.Read.All

When authenticated with a user principal, this data source does not require any additional roles.

Example Usage

using System.Collections.Generic;
using Pulumi;
using AzureAD = Pulumi.AzureAD;

return await Deployment.RunAsync(() => 
{
    var example = AzureAD.GetApplication.Invoke(new()
    {
        DisplayName = "My First AzureAD Application",
    });

    return new Dictionary<string, object?>
    {
        ["applicationObjectId"] = example.Apply(getApplicationResult => getApplicationResult.Id),
    };
});
package main

import (
	"github.com/pulumi/pulumi-azuread/sdk/v5/go/azuread"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		example, err := azuread.LookupApplication(ctx, &GetApplicationArgs{
			DisplayName: pulumi.StringRef("My First AzureAD Application"),
		}, nil)
		if err != nil {
			return err
		}
		ctx.Export("applicationObjectId", example.Id)
		return nil
	})
}
package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azuread.AzureadFunctions;
import com.pulumi.azuread.inputs.GetApplicationArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        final var example = AzureadFunctions.getApplication(GetApplicationArgs.builder()
            .displayName("My First AzureAD Application")
            .build());

        ctx.export("applicationObjectId", example.applyValue(getApplicationResult -> getApplicationResult.id()));
    }
}
import pulumi
import pulumi_azuread as azuread

example = azuread.get_application(display_name="My First AzureAD Application")
pulumi.export("applicationObjectId", example.id)
import * as pulumi from "@pulumi/pulumi";
import * as azuread from "@pulumi/azuread";

const example = azuread.getApplication({
    displayName: "My First AzureAD Application",
});
export const applicationObjectId = example.then(example => example.id);
variables:
  example:
    Fn::Invoke:
      Function: azuread:getApplication
      Arguments:
        displayName: My First AzureAD Application
outputs:
  applicationObjectId: ${example.id}

Using getApplication

Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

function getApplication(args: GetApplicationArgs, opts?: InvokeOptions): Promise<GetApplicationResult>
function getApplicationOutput(args: GetApplicationOutputArgs, opts?: InvokeOptions): Output<GetApplicationResult>
def get_application(application_id: Optional[str] = None,
                    display_name: Optional[str] = None,
                    object_id: Optional[str] = None,
                    opts: Optional[InvokeOptions] = None) -> GetApplicationResult
def get_application_output(application_id: Optional[pulumi.Input[str]] = None,
                    display_name: Optional[pulumi.Input[str]] = None,
                    object_id: Optional[pulumi.Input[str]] = None,
                    opts: Optional[InvokeOptions] = None) -> Output[GetApplicationResult]
func LookupApplication(ctx *Context, args *LookupApplicationArgs, opts ...InvokeOption) (*LookupApplicationResult, error)
func LookupApplicationOutput(ctx *Context, args *LookupApplicationOutputArgs, opts ...InvokeOption) LookupApplicationResultOutput

> Note: This function is named LookupApplication in the Go SDK.

public static class GetApplication 
{
    public static Task<GetApplicationResult> InvokeAsync(GetApplicationArgs args, InvokeOptions? opts = null)
    public static Output<GetApplicationResult> Invoke(GetApplicationInvokeArgs args, InvokeOptions? opts = null)
}
public static CompletableFuture<GetApplicationResult> getApplication(GetApplicationArgs args, InvokeOptions options)
// Output-based functions aren't available in Java yet
Fn::Invoke:
  Function: azuread:index/getApplication:getApplication
  Arguments:
    # Arguments dictionary

The following arguments are supported:

ApplicationId string

Specifies the Application ID (also called Client ID).

DisplayName string

Specifies the display name of the application.

ObjectId string

Specifies the Object ID of the application.

ApplicationId string

Specifies the Application ID (also called Client ID).

DisplayName string

Specifies the display name of the application.

ObjectId string

Specifies the Object ID of the application.

applicationId String

Specifies the Application ID (also called Client ID).

displayName String

Specifies the display name of the application.

objectId String

Specifies the Object ID of the application.

applicationId string

Specifies the Application ID (also called Client ID).

displayName string

Specifies the display name of the application.

objectId string

Specifies the Object ID of the application.

application_id str

Specifies the Application ID (also called Client ID).

display_name str

Specifies the display name of the application.

object_id str

Specifies the Object ID of the application.

applicationId String

Specifies the Application ID (also called Client ID).

displayName String

Specifies the display name of the application.

objectId String

Specifies the Object ID of the application.

getApplication Result

The following output properties are available:

Apis List<Pulumi.AzureAD.Outputs.GetApplicationApi>

An api block as documented below.

AppRoleIds Dictionary<string, string>

A mapping of app role values to app role IDs, intended to be useful when referencing app roles in other resources in your configuration.

AppRoles List<Pulumi.AzureAD.Outputs.GetApplicationAppRole>

A collection of app_role blocks as documented below. For more information see official documentation on Application Roles.

ApplicationId string

The Application ID (also called Client ID).

DeviceOnlyAuthEnabled bool

Specifies whether this application supports device authentication without a user.

DisabledByMicrosoft string

Whether Microsoft has disabled the registered application. If the application is disabled, this will be a string indicating the status/reason, e.g. DisabledDueToViolationOfServicesAgreement

DisplayName string

Display name for the app role that appears during app role assignment and in consent experiences.

FallbackPublicClientEnabled bool

The fallback application type as public client, such as an installed application running on a mobile device.

FeatureTags List<Pulumi.AzureAD.Outputs.GetApplicationFeatureTag>

A features block as described below.

GroupMembershipClaims List<string>

The groups claim issued in a user or OAuth 2.0 access token that the app expects.

Id string

The provider-assigned unique ID for this managed resource.

IdentifierUris List<string>

A list of user-defined URI(s) that uniquely identify a Web application within it's Azure AD tenant, or within a verified custom domain if the application is multi-tenant.

LogoUrl string

CDN URL to the application's logo.

MarketingUrl string

URL of the application's marketing page.

Oauth2PermissionScopeIds Dictionary<string, string>

A mapping of OAuth2.0 permission scope values to scope IDs, intended to be useful when referencing permission scopes in other resources in your configuration.

Oauth2PostResponseRequired bool

Specifies whether, as part of OAuth 2.0 token requests, Azure AD allows POST requests, as opposed to GET requests. When false, only GET requests are allowed.

ObjectId string

The application's object ID.

OptionalClaims List<Pulumi.AzureAD.Outputs.GetApplicationOptionalClaim>

An optional_claims block as documented below.

Owners List<string>

A list of object IDs of principals that are assigned ownership of the application.

PrivacyStatementUrl string

URL of the application's privacy statement.

PublicClients List<Pulumi.AzureAD.Outputs.GetApplicationPublicClient>

A public_client block as documented below.

PublisherDomain string

The verified publisher domain for the application.

RequiredResourceAccesses List<Pulumi.AzureAD.Outputs.GetApplicationRequiredResourceAccess>

A collection of required_resource_access blocks as documented below.

SignInAudience string

The Microsoft account types that are supported for the current application. One of AzureADMyOrg, AzureADMultipleOrgs, AzureADandPersonalMicrosoftAccount or PersonalMicrosoftAccount.

SinglePageApplications List<Pulumi.AzureAD.Outputs.GetApplicationSinglePageApplication>

A single_page_application block as documented below.

SupportUrl string

URL of the application's support page.

Tags List<string>

A list of tags applied to the application.

TermsOfServiceUrl string

URL of the application's terms of service statement.

Webs List<Pulumi.AzureAD.Outputs.GetApplicationWeb>

A web block as documented below.

Apis []GetApplicationApi

An api block as documented below.

AppRoleIds map[string]string

A mapping of app role values to app role IDs, intended to be useful when referencing app roles in other resources in your configuration.

AppRoles []GetApplicationAppRole

A collection of app_role blocks as documented below. For more information see official documentation on Application Roles.

ApplicationId string

The Application ID (also called Client ID).

DeviceOnlyAuthEnabled bool

Specifies whether this application supports device authentication without a user.

DisabledByMicrosoft string

Whether Microsoft has disabled the registered application. If the application is disabled, this will be a string indicating the status/reason, e.g. DisabledDueToViolationOfServicesAgreement

DisplayName string

Display name for the app role that appears during app role assignment and in consent experiences.

FallbackPublicClientEnabled bool

The fallback application type as public client, such as an installed application running on a mobile device.

FeatureTags []GetApplicationFeatureTag

A features block as described below.

GroupMembershipClaims []string

The groups claim issued in a user or OAuth 2.0 access token that the app expects.

Id string

The provider-assigned unique ID for this managed resource.

IdentifierUris []string

A list of user-defined URI(s) that uniquely identify a Web application within it's Azure AD tenant, or within a verified custom domain if the application is multi-tenant.

LogoUrl string

CDN URL to the application's logo.

MarketingUrl string

URL of the application's marketing page.

Oauth2PermissionScopeIds map[string]string

A mapping of OAuth2.0 permission scope values to scope IDs, intended to be useful when referencing permission scopes in other resources in your configuration.

Oauth2PostResponseRequired bool

Specifies whether, as part of OAuth 2.0 token requests, Azure AD allows POST requests, as opposed to GET requests. When false, only GET requests are allowed.

ObjectId string

The application's object ID.

OptionalClaims []GetApplicationOptionalClaim

An optional_claims block as documented below.

Owners []string

A list of object IDs of principals that are assigned ownership of the application.

PrivacyStatementUrl string

URL of the application's privacy statement.

PublicClients []GetApplicationPublicClient

A public_client block as documented below.

PublisherDomain string

The verified publisher domain for the application.

RequiredResourceAccesses []GetApplicationRequiredResourceAccess

A collection of required_resource_access blocks as documented below.

SignInAudience string

The Microsoft account types that are supported for the current application. One of AzureADMyOrg, AzureADMultipleOrgs, AzureADandPersonalMicrosoftAccount or PersonalMicrosoftAccount.

SinglePageApplications []GetApplicationSinglePageApplication

A single_page_application block as documented below.

SupportUrl string

URL of the application's support page.

Tags []string

A list of tags applied to the application.

TermsOfServiceUrl string

URL of the application's terms of service statement.

Webs []GetApplicationWeb

A web block as documented below.

apis List<GetApplicationApi>

An api block as documented below.

appRoleIds Map<String,String>

A mapping of app role values to app role IDs, intended to be useful when referencing app roles in other resources in your configuration.

appRoles List<GetApplicationAppRole>

A collection of app_role blocks as documented below. For more information see official documentation on Application Roles.

applicationId String

The Application ID (also called Client ID).

deviceOnlyAuthEnabled Boolean

Specifies whether this application supports device authentication without a user.

disabledByMicrosoft String

Whether Microsoft has disabled the registered application. If the application is disabled, this will be a string indicating the status/reason, e.g. DisabledDueToViolationOfServicesAgreement

displayName String

Display name for the app role that appears during app role assignment and in consent experiences.

fallbackPublicClientEnabled Boolean

The fallback application type as public client, such as an installed application running on a mobile device.

featureTags List<GetApplicationFeatureTag>

A features block as described below.

groupMembershipClaims List<String>

The groups claim issued in a user or OAuth 2.0 access token that the app expects.

id String

The provider-assigned unique ID for this managed resource.

identifierUris List<String>

A list of user-defined URI(s) that uniquely identify a Web application within it's Azure AD tenant, or within a verified custom domain if the application is multi-tenant.

logoUrl String

CDN URL to the application's logo.

marketingUrl String

URL of the application's marketing page.

oauth2PermissionScopeIds Map<String,String>

A mapping of OAuth2.0 permission scope values to scope IDs, intended to be useful when referencing permission scopes in other resources in your configuration.

oauth2PostResponseRequired Boolean

Specifies whether, as part of OAuth 2.0 token requests, Azure AD allows POST requests, as opposed to GET requests. When false, only GET requests are allowed.

objectId String

The application's object ID.

optionalClaims List<GetApplicationOptionalClaim>

An optional_claims block as documented below.

owners List<String>

A list of object IDs of principals that are assigned ownership of the application.

privacyStatementUrl String

URL of the application's privacy statement.

publicClients List<GetApplicationPublicClient>

A public_client block as documented below.

publisherDomain String

The verified publisher domain for the application.

requiredResourceAccesses List<GetApplicationRequiredResourceAccess>

A collection of required_resource_access blocks as documented below.

signInAudience String

The Microsoft account types that are supported for the current application. One of AzureADMyOrg, AzureADMultipleOrgs, AzureADandPersonalMicrosoftAccount or PersonalMicrosoftAccount.

singlePageApplications List<GetApplicationSinglePageApplication>

A single_page_application block as documented below.

supportUrl String

URL of the application's support page.

tags List<String>

A list of tags applied to the application.

termsOfServiceUrl String

URL of the application's terms of service statement.

webs List<GetApplicationWeb>

A web block as documented below.

apis GetApplicationApi[]

An api block as documented below.

appRoleIds {[key: string]: string}

A mapping of app role values to app role IDs, intended to be useful when referencing app roles in other resources in your configuration.

appRoles GetApplicationAppRole[]

A collection of app_role blocks as documented below. For more information see official documentation on Application Roles.

applicationId string

The Application ID (also called Client ID).

deviceOnlyAuthEnabled boolean

Specifies whether this application supports device authentication without a user.

disabledByMicrosoft string

Whether Microsoft has disabled the registered application. If the application is disabled, this will be a string indicating the status/reason, e.g. DisabledDueToViolationOfServicesAgreement

displayName string

Display name for the app role that appears during app role assignment and in consent experiences.

fallbackPublicClientEnabled boolean

The fallback application type as public client, such as an installed application running on a mobile device.

featureTags GetApplicationFeatureTag[]

A features block as described below.

groupMembershipClaims string[]

The groups claim issued in a user or OAuth 2.0 access token that the app expects.

id string

The provider-assigned unique ID for this managed resource.

identifierUris string[]

A list of user-defined URI(s) that uniquely identify a Web application within it's Azure AD tenant, or within a verified custom domain if the application is multi-tenant.

logoUrl string

CDN URL to the application's logo.

marketingUrl string

URL of the application's marketing page.

oauth2PermissionScopeIds {[key: string]: string}

A mapping of OAuth2.0 permission scope values to scope IDs, intended to be useful when referencing permission scopes in other resources in your configuration.

oauth2PostResponseRequired boolean

Specifies whether, as part of OAuth 2.0 token requests, Azure AD allows POST requests, as opposed to GET requests. When false, only GET requests are allowed.

objectId string

The application's object ID.

optionalClaims GetApplicationOptionalClaim[]

An optional_claims block as documented below.

owners string[]

A list of object IDs of principals that are assigned ownership of the application.

privacyStatementUrl string

URL of the application's privacy statement.

publicClients GetApplicationPublicClient[]

A public_client block as documented below.

publisherDomain string

The verified publisher domain for the application.

requiredResourceAccesses GetApplicationRequiredResourceAccess[]

A collection of required_resource_access blocks as documented below.

signInAudience string

The Microsoft account types that are supported for the current application. One of AzureADMyOrg, AzureADMultipleOrgs, AzureADandPersonalMicrosoftAccount or PersonalMicrosoftAccount.

singlePageApplications GetApplicationSinglePageApplication[]

A single_page_application block as documented below.

supportUrl string

URL of the application's support page.

tags string[]

A list of tags applied to the application.

termsOfServiceUrl string

URL of the application's terms of service statement.

webs GetApplicationWeb[]

A web block as documented below.

apis Sequence[GetApplicationApi]

An api block as documented below.

app_role_ids Mapping[str, str]

A mapping of app role values to app role IDs, intended to be useful when referencing app roles in other resources in your configuration.

app_roles Sequence[GetApplicationAppRole]

A collection of app_role blocks as documented below. For more information see official documentation on Application Roles.

application_id str

The Application ID (also called Client ID).

device_only_auth_enabled bool

Specifies whether this application supports device authentication without a user.

disabled_by_microsoft str

Whether Microsoft has disabled the registered application. If the application is disabled, this will be a string indicating the status/reason, e.g. DisabledDueToViolationOfServicesAgreement

display_name str

Display name for the app role that appears during app role assignment and in consent experiences.

fallback_public_client_enabled bool

The fallback application type as public client, such as an installed application running on a mobile device.

feature_tags Sequence[GetApplicationFeatureTag]

A features block as described below.

group_membership_claims Sequence[str]

The groups claim issued in a user or OAuth 2.0 access token that the app expects.

id str

The provider-assigned unique ID for this managed resource.

identifier_uris Sequence[str]

A list of user-defined URI(s) that uniquely identify a Web application within it's Azure AD tenant, or within a verified custom domain if the application is multi-tenant.

logo_url str

CDN URL to the application's logo.

marketing_url str

URL of the application's marketing page.

oauth2_permission_scope_ids Mapping[str, str]

A mapping of OAuth2.0 permission scope values to scope IDs, intended to be useful when referencing permission scopes in other resources in your configuration.

oauth2_post_response_required bool

Specifies whether, as part of OAuth 2.0 token requests, Azure AD allows POST requests, as opposed to GET requests. When false, only GET requests are allowed.

object_id str

The application's object ID.

optional_claims Sequence[GetApplicationOptionalClaim]

An optional_claims block as documented below.

owners Sequence[str]

A list of object IDs of principals that are assigned ownership of the application.

privacy_statement_url str

URL of the application's privacy statement.

public_clients Sequence[GetApplicationPublicClient]

A public_client block as documented below.

publisher_domain str

The verified publisher domain for the application.

required_resource_accesses Sequence[GetApplicationRequiredResourceAccess]

A collection of required_resource_access blocks as documented below.

sign_in_audience str

The Microsoft account types that are supported for the current application. One of AzureADMyOrg, AzureADMultipleOrgs, AzureADandPersonalMicrosoftAccount or PersonalMicrosoftAccount.

single_page_applications Sequence[GetApplicationSinglePageApplication]

A single_page_application block as documented below.

support_url str

URL of the application's support page.

tags Sequence[str]

A list of tags applied to the application.

terms_of_service_url str

URL of the application's terms of service statement.

webs Sequence[GetApplicationWeb]

A web block as documented below.

apis List<Property Map>

An api block as documented below.

appRoleIds Map<String>

A mapping of app role values to app role IDs, intended to be useful when referencing app roles in other resources in your configuration.

appRoles List<Property Map>

A collection of app_role blocks as documented below. For more information see official documentation on Application Roles.

applicationId String

The Application ID (also called Client ID).

deviceOnlyAuthEnabled Boolean

Specifies whether this application supports device authentication without a user.

disabledByMicrosoft String

Whether Microsoft has disabled the registered application. If the application is disabled, this will be a string indicating the status/reason, e.g. DisabledDueToViolationOfServicesAgreement

displayName String

Display name for the app role that appears during app role assignment and in consent experiences.

fallbackPublicClientEnabled Boolean

The fallback application type as public client, such as an installed application running on a mobile device.

featureTags List<Property Map>

A features block as described below.

groupMembershipClaims List<String>

The groups claim issued in a user or OAuth 2.0 access token that the app expects.

id String

The provider-assigned unique ID for this managed resource.

identifierUris List<String>

A list of user-defined URI(s) that uniquely identify a Web application within it's Azure AD tenant, or within a verified custom domain if the application is multi-tenant.

logoUrl String

CDN URL to the application's logo.

marketingUrl String

URL of the application's marketing page.

oauth2PermissionScopeIds Map<String>

A mapping of OAuth2.0 permission scope values to scope IDs, intended to be useful when referencing permission scopes in other resources in your configuration.

oauth2PostResponseRequired Boolean

Specifies whether, as part of OAuth 2.0 token requests, Azure AD allows POST requests, as opposed to GET requests. When false, only GET requests are allowed.

objectId String

The application's object ID.

optionalClaims List<Property Map>

An optional_claims block as documented below.

owners List<String>

A list of object IDs of principals that are assigned ownership of the application.

privacyStatementUrl String

URL of the application's privacy statement.

publicClients List<Property Map>

A public_client block as documented below.

publisherDomain String

The verified publisher domain for the application.

requiredResourceAccesses List<Property Map>

A collection of required_resource_access blocks as documented below.

signInAudience String

The Microsoft account types that are supported for the current application. One of AzureADMyOrg, AzureADMultipleOrgs, AzureADandPersonalMicrosoftAccount or PersonalMicrosoftAccount.

singlePageApplications List<Property Map>

A single_page_application block as documented below.

supportUrl String

URL of the application's support page.

tags List<String>

A list of tags applied to the application.

termsOfServiceUrl String

URL of the application's terms of service statement.

webs List<Property Map>

A web block as documented below.

Supporting Types

GetApplicationApi

KnownClientApplications List<string>

A set of application IDs (client IDs), used for bundling consent if you have a solution that contains two parts: a client app and a custom web API app.

MappedClaimsEnabled bool

Allows an application to use claims mapping without specifying a custom signing key.

Oauth2PermissionScopes List<Pulumi.AzureAD.Inputs.GetApplicationApiOauth2PermissionScope>

One or more oauth2_permission_scope blocks as documented below, to describe delegated permissions exposed by the web API represented by this application.

RequestedAccessTokenVersion int

The access token version expected by this resource. Possible values are 1 or 2.

KnownClientApplications []string

A set of application IDs (client IDs), used for bundling consent if you have a solution that contains two parts: a client app and a custom web API app.

MappedClaimsEnabled bool

Allows an application to use claims mapping without specifying a custom signing key.

Oauth2PermissionScopes []GetApplicationApiOauth2PermissionScope

One or more oauth2_permission_scope blocks as documented below, to describe delegated permissions exposed by the web API represented by this application.

RequestedAccessTokenVersion int

The access token version expected by this resource. Possible values are 1 or 2.

knownClientApplications List<String>

A set of application IDs (client IDs), used for bundling consent if you have a solution that contains two parts: a client app and a custom web API app.

mappedClaimsEnabled Boolean

Allows an application to use claims mapping without specifying a custom signing key.

oauth2PermissionScopes List<GetApplicationApiOauth2PermissionScope>

One or more oauth2_permission_scope blocks as documented below, to describe delegated permissions exposed by the web API represented by this application.

requestedAccessTokenVersion Integer

The access token version expected by this resource. Possible values are 1 or 2.

knownClientApplications string[]

A set of application IDs (client IDs), used for bundling consent if you have a solution that contains two parts: a client app and a custom web API app.

mappedClaimsEnabled boolean

Allows an application to use claims mapping without specifying a custom signing key.

oauth2PermissionScopes GetApplicationApiOauth2PermissionScope[]

One or more oauth2_permission_scope blocks as documented below, to describe delegated permissions exposed by the web API represented by this application.

requestedAccessTokenVersion number

The access token version expected by this resource. Possible values are 1 or 2.

known_client_applications Sequence[str]

A set of application IDs (client IDs), used for bundling consent if you have a solution that contains two parts: a client app and a custom web API app.

mapped_claims_enabled bool

Allows an application to use claims mapping without specifying a custom signing key.

oauth2_permission_scopes Sequence[GetApplicationApiOauth2PermissionScope]

One or more oauth2_permission_scope blocks as documented below, to describe delegated permissions exposed by the web API represented by this application.

requested_access_token_version int

The access token version expected by this resource. Possible values are 1 or 2.

knownClientApplications List<String>

A set of application IDs (client IDs), used for bundling consent if you have a solution that contains two parts: a client app and a custom web API app.

mappedClaimsEnabled Boolean

Allows an application to use claims mapping without specifying a custom signing key.

oauth2PermissionScopes List<Property Map>

One or more oauth2_permission_scope blocks as documented below, to describe delegated permissions exposed by the web API represented by this application.

requestedAccessTokenVersion Number

The access token version expected by this resource. Possible values are 1 or 2.

GetApplicationApiOauth2PermissionScope

AdminConsentDescription string

Delegated permission description that appears in all tenant-wide admin consent experiences, intended to be read by an administrator granting the permission on behalf of all users.

AdminConsentDisplayName string

Display name for the delegated permission, intended to be read by an administrator granting the permission on behalf of all users.

Enabled bool

Determines if the app role is enabled.

Id string

The unique identifier for an app role or OAuth2 permission scope published by the resource application.

Type string

Specifies whether the id property references an app role or an OAuth2 permission scope. Possible values are Role or Scope.

UserConsentDescription string

Delegated permission description that appears in the end user consent experience, intended to be read by a user consenting on their own behalf.

UserConsentDisplayName string

Display name for the delegated permission that appears in the end user consent experience.

Value string

The value that is used for the roles claim in ID tokens and OAuth 2.0 access tokens that are authenticating an assigned service or user principal.

AdminConsentDescription string

Delegated permission description that appears in all tenant-wide admin consent experiences, intended to be read by an administrator granting the permission on behalf of all users.

AdminConsentDisplayName string

Display name for the delegated permission, intended to be read by an administrator granting the permission on behalf of all users.

Enabled bool

Determines if the app role is enabled.

Id string

The unique identifier for an app role or OAuth2 permission scope published by the resource application.

Type string

Specifies whether the id property references an app role or an OAuth2 permission scope. Possible values are Role or Scope.

UserConsentDescription string

Delegated permission description that appears in the end user consent experience, intended to be read by a user consenting on their own behalf.

UserConsentDisplayName string

Display name for the delegated permission that appears in the end user consent experience.

Value string

The value that is used for the roles claim in ID tokens and OAuth 2.0 access tokens that are authenticating an assigned service or user principal.

adminConsentDescription String

Delegated permission description that appears in all tenant-wide admin consent experiences, intended to be read by an administrator granting the permission on behalf of all users.

adminConsentDisplayName String

Display name for the delegated permission, intended to be read by an administrator granting the permission on behalf of all users.

enabled Boolean

Determines if the app role is enabled.

id String

The unique identifier for an app role or OAuth2 permission scope published by the resource application.

type String

Specifies whether the id property references an app role or an OAuth2 permission scope. Possible values are Role or Scope.

userConsentDescription String

Delegated permission description that appears in the end user consent experience, intended to be read by a user consenting on their own behalf.

userConsentDisplayName String

Display name for the delegated permission that appears in the end user consent experience.

value String

The value that is used for the roles claim in ID tokens and OAuth 2.0 access tokens that are authenticating an assigned service or user principal.

adminConsentDescription string

Delegated permission description that appears in all tenant-wide admin consent experiences, intended to be read by an administrator granting the permission on behalf of all users.

adminConsentDisplayName string

Display name for the delegated permission, intended to be read by an administrator granting the permission on behalf of all users.

enabled boolean

Determines if the app role is enabled.

id string

The unique identifier for an app role or OAuth2 permission scope published by the resource application.

type string

Specifies whether the id property references an app role or an OAuth2 permission scope. Possible values are Role or Scope.

userConsentDescription string

Delegated permission description that appears in the end user consent experience, intended to be read by a user consenting on their own behalf.

userConsentDisplayName string

Display name for the delegated permission that appears in the end user consent experience.

value string

The value that is used for the roles claim in ID tokens and OAuth 2.0 access tokens that are authenticating an assigned service or user principal.

admin_consent_description str

Delegated permission description that appears in all tenant-wide admin consent experiences, intended to be read by an administrator granting the permission on behalf of all users.

admin_consent_display_name str

Display name for the delegated permission, intended to be read by an administrator granting the permission on behalf of all users.

enabled bool

Determines if the app role is enabled.

id str

The unique identifier for an app role or OAuth2 permission scope published by the resource application.

type str

Specifies whether the id property references an app role or an OAuth2 permission scope. Possible values are Role or Scope.

user_consent_description str

Delegated permission description that appears in the end user consent experience, intended to be read by a user consenting on their own behalf.

user_consent_display_name str

Display name for the delegated permission that appears in the end user consent experience.

value str

The value that is used for the roles claim in ID tokens and OAuth 2.0 access tokens that are authenticating an assigned service or user principal.

adminConsentDescription String

Delegated permission description that appears in all tenant-wide admin consent experiences, intended to be read by an administrator granting the permission on behalf of all users.

adminConsentDisplayName String

Display name for the delegated permission, intended to be read by an administrator granting the permission on behalf of all users.

enabled Boolean

Determines if the app role is enabled.

id String

The unique identifier for an app role or OAuth2 permission scope published by the resource application.

type String

Specifies whether the id property references an app role or an OAuth2 permission scope. Possible values are Role or Scope.

userConsentDescription String

Delegated permission description that appears in the end user consent experience, intended to be read by a user consenting on their own behalf.

userConsentDisplayName String

Display name for the delegated permission that appears in the end user consent experience.

value String

The value that is used for the roles claim in ID tokens and OAuth 2.0 access tokens that are authenticating an assigned service or user principal.

GetApplicationAppRole

AllowedMemberTypes List<string>

Specifies whether this app role definition can be assigned to users and groups, or to other applications (that are accessing this application in a standalone scenario). Possible values are User or Application, or both.

Description string

Description of the app role that appears when the role is being assigned and, if the role functions as an application permissions, during the consent experiences.

DisplayName string

Specifies the display name of the application.

Enabled bool

Determines if the app role is enabled.

Id string

The unique identifier for an app role or OAuth2 permission scope published by the resource application.

Value string

The value that is used for the roles claim in ID tokens and OAuth 2.0 access tokens that are authenticating an assigned service or user principal.

AllowedMemberTypes []string

Specifies whether this app role definition can be assigned to users and groups, or to other applications (that are accessing this application in a standalone scenario). Possible values are User or Application, or both.

Description string

Description of the app role that appears when the role is being assigned and, if the role functions as an application permissions, during the consent experiences.

DisplayName string

Specifies the display name of the application.

Enabled bool

Determines if the app role is enabled.

Id string

The unique identifier for an app role or OAuth2 permission scope published by the resource application.

Value string

The value that is used for the roles claim in ID tokens and OAuth 2.0 access tokens that are authenticating an assigned service or user principal.

allowedMemberTypes List<String>

Specifies whether this app role definition can be assigned to users and groups, or to other applications (that are accessing this application in a standalone scenario). Possible values are User or Application, or both.

description String

Description of the app role that appears when the role is being assigned and, if the role functions as an application permissions, during the consent experiences.

displayName String

Specifies the display name of the application.

enabled Boolean

Determines if the app role is enabled.

id String

The unique identifier for an app role or OAuth2 permission scope published by the resource application.

value String

The value that is used for the roles claim in ID tokens and OAuth 2.0 access tokens that are authenticating an assigned service or user principal.

allowedMemberTypes string[]

Specifies whether this app role definition can be assigned to users and groups, or to other applications (that are accessing this application in a standalone scenario). Possible values are User or Application, or both.

description string

Description of the app role that appears when the role is being assigned and, if the role functions as an application permissions, during the consent experiences.

displayName string

Specifies the display name of the application.

enabled boolean

Determines if the app role is enabled.

id string

The unique identifier for an app role or OAuth2 permission scope published by the resource application.

value string

The value that is used for the roles claim in ID tokens and OAuth 2.0 access tokens that are authenticating an assigned service or user principal.

allowed_member_types Sequence[str]

Specifies whether this app role definition can be assigned to users and groups, or to other applications (that are accessing this application in a standalone scenario). Possible values are User or Application, or both.

description str

Description of the app role that appears when the role is being assigned and, if the role functions as an application permissions, during the consent experiences.

display_name str

Specifies the display name of the application.

enabled bool

Determines if the app role is enabled.

id str

The unique identifier for an app role or OAuth2 permission scope published by the resource application.

value str

The value that is used for the roles claim in ID tokens and OAuth 2.0 access tokens that are authenticating an assigned service or user principal.

allowedMemberTypes List<String>

Specifies whether this app role definition can be assigned to users and groups, or to other applications (that are accessing this application in a standalone scenario). Possible values are User or Application, or both.

description String

Description of the app role that appears when the role is being assigned and, if the role functions as an application permissions, during the consent experiences.

displayName String

Specifies the display name of the application.

enabled Boolean

Determines if the app role is enabled.

id String

The unique identifier for an app role or OAuth2 permission scope published by the resource application.

value String

The value that is used for the roles claim in ID tokens and OAuth 2.0 access tokens that are authenticating an assigned service or user principal.

GetApplicationFeatureTag

CustomSingleSignOn bool

Whether this application represents a custom SAML application for linked service principals.

Enterprise bool

Whether this application represents an Enterprise Application for linked service principals.

Gallery bool

Whether this application represents a gallery application for linked service principals.

Hide bool

Whether this app is visible to users in My Apps and Office 365 Launcher.

CustomSingleSignOn bool

Whether this application represents a custom SAML application for linked service principals.

Enterprise bool

Whether this application represents an Enterprise Application for linked service principals.

Gallery bool

Whether this application represents a gallery application for linked service principals.

Hide bool

Whether this app is visible to users in My Apps and Office 365 Launcher.

customSingleSignOn Boolean

Whether this application represents a custom SAML application for linked service principals.

enterprise Boolean

Whether this application represents an Enterprise Application for linked service principals.

gallery Boolean

Whether this application represents a gallery application for linked service principals.

hide Boolean

Whether this app is visible to users in My Apps and Office 365 Launcher.

customSingleSignOn boolean

Whether this application represents a custom SAML application for linked service principals.

enterprise boolean

Whether this application represents an Enterprise Application for linked service principals.

gallery boolean

Whether this application represents a gallery application for linked service principals.

hide boolean

Whether this app is visible to users in My Apps and Office 365 Launcher.

custom_single_sign_on bool

Whether this application represents a custom SAML application for linked service principals.

enterprise bool

Whether this application represents an Enterprise Application for linked service principals.

gallery bool

Whether this application represents a gallery application for linked service principals.

hide bool

Whether this app is visible to users in My Apps and Office 365 Launcher.

customSingleSignOn Boolean

Whether this application represents a custom SAML application for linked service principals.

enterprise Boolean

Whether this application represents an Enterprise Application for linked service principals.

gallery Boolean

Whether this application represents a gallery application for linked service principals.

hide Boolean

Whether this app is visible to users in My Apps and Office 365 Launcher.

GetApplicationOptionalClaim

AccessTokens List<Pulumi.AzureAD.Inputs.GetApplicationOptionalClaimAccessToken>

One or more access_token blocks as documented below.

IdTokens List<Pulumi.AzureAD.Inputs.GetApplicationOptionalClaimIdToken>

One or more id_token blocks as documented below.

Saml2Tokens List<Pulumi.AzureAD.Inputs.GetApplicationOptionalClaimSaml2Token>

One or more saml2_token blocks as documented below.

AccessTokens []GetApplicationOptionalClaimAccessToken

One or more access_token blocks as documented below.

IdTokens []GetApplicationOptionalClaimIdToken

One or more id_token blocks as documented below.

Saml2Tokens []GetApplicationOptionalClaimSaml2Token

One or more saml2_token blocks as documented below.

accessTokens List<GetApplicationOptionalClaimAccessToken>

One or more access_token blocks as documented below.

idTokens List<GetApplicationOptionalClaimIdToken>

One or more id_token blocks as documented below.

saml2Tokens List<GetApplicationOptionalClaimSaml2Token>

One or more saml2_token blocks as documented below.

accessTokens GetApplicationOptionalClaimAccessToken[]

One or more access_token blocks as documented below.

idTokens GetApplicationOptionalClaimIdToken[]

One or more id_token blocks as documented below.

saml2Tokens GetApplicationOptionalClaimSaml2Token[]

One or more saml2_token blocks as documented below.

access_tokens Sequence[GetApplicationOptionalClaimAccessToken]

One or more access_token blocks as documented below.

id_tokens Sequence[GetApplicationOptionalClaimIdToken]

One or more id_token blocks as documented below.

saml2_tokens Sequence[GetApplicationOptionalClaimSaml2Token]

One or more saml2_token blocks as documented below.

accessTokens List<Property Map>

One or more access_token blocks as documented below.

idTokens List<Property Map>

One or more id_token blocks as documented below.

saml2Tokens List<Property Map>

One or more saml2_token blocks as documented below.

GetApplicationOptionalClaimAccessToken

Name string

The name of the optional claim.

AdditionalProperties List<string>

List of Additional Properties of the claim. If a property exists in this list, it modifies the behaviour of the optional claim.

Essential bool

Whether the claim specified by the client is necessary to ensure a smooth authorization experience.

Source string

The source of the claim. If source is absent, the claim is a predefined optional claim. If source is user, the value of name is the extension property from the user object.

Name string

The name of the optional claim.

AdditionalProperties []string

List of Additional Properties of the claim. If a property exists in this list, it modifies the behaviour of the optional claim.

Essential bool

Whether the claim specified by the client is necessary to ensure a smooth authorization experience.

Source string

The source of the claim. If source is absent, the claim is a predefined optional claim. If source is user, the value of name is the extension property from the user object.

name String

The name of the optional claim.

additionalProperties List<String>

List of Additional Properties of the claim. If a property exists in this list, it modifies the behaviour of the optional claim.

essential Boolean

Whether the claim specified by the client is necessary to ensure a smooth authorization experience.

source String

The source of the claim. If source is absent, the claim is a predefined optional claim. If source is user, the value of name is the extension property from the user object.

name string

The name of the optional claim.

additionalProperties string[]

List of Additional Properties of the claim. If a property exists in this list, it modifies the behaviour of the optional claim.

essential boolean

Whether the claim specified by the client is necessary to ensure a smooth authorization experience.

source string

The source of the claim. If source is absent, the claim is a predefined optional claim. If source is user, the value of name is the extension property from the user object.

name str

The name of the optional claim.

additional_properties Sequence[str]

List of Additional Properties of the claim. If a property exists in this list, it modifies the behaviour of the optional claim.

essential bool

Whether the claim specified by the client is necessary to ensure a smooth authorization experience.

source str

The source of the claim. If source is absent, the claim is a predefined optional claim. If source is user, the value of name is the extension property from the user object.

name String

The name of the optional claim.

additionalProperties List<String>

List of Additional Properties of the claim. If a property exists in this list, it modifies the behaviour of the optional claim.

essential Boolean

Whether the claim specified by the client is necessary to ensure a smooth authorization experience.

source String

The source of the claim. If source is absent, the claim is a predefined optional claim. If source is user, the value of name is the extension property from the user object.

GetApplicationOptionalClaimIdToken

Name string

The name of the optional claim.

AdditionalProperties List<string>

List of Additional Properties of the claim. If a property exists in this list, it modifies the behaviour of the optional claim.

Essential bool

Whether the claim specified by the client is necessary to ensure a smooth authorization experience.

Source string

The source of the claim. If source is absent, the claim is a predefined optional claim. If source is user, the value of name is the extension property from the user object.

Name string

The name of the optional claim.

AdditionalProperties []string

List of Additional Properties of the claim. If a property exists in this list, it modifies the behaviour of the optional claim.

Essential bool

Whether the claim specified by the client is necessary to ensure a smooth authorization experience.

Source string

The source of the claim. If source is absent, the claim is a predefined optional claim. If source is user, the value of name is the extension property from the user object.

name String

The name of the optional claim.

additionalProperties List<String>

List of Additional Properties of the claim. If a property exists in this list, it modifies the behaviour of the optional claim.

essential Boolean

Whether the claim specified by the client is necessary to ensure a smooth authorization experience.

source String

The source of the claim. If source is absent, the claim is a predefined optional claim. If source is user, the value of name is the extension property from the user object.

name string

The name of the optional claim.

additionalProperties string[]

List of Additional Properties of the claim. If a property exists in this list, it modifies the behaviour of the optional claim.

essential boolean

Whether the claim specified by the client is necessary to ensure a smooth authorization experience.

source string

The source of the claim. If source is absent, the claim is a predefined optional claim. If source is user, the value of name is the extension property from the user object.

name str

The name of the optional claim.

additional_properties Sequence[str]

List of Additional Properties of the claim. If a property exists in this list, it modifies the behaviour of the optional claim.

essential bool

Whether the claim specified by the client is necessary to ensure a smooth authorization experience.

source str

The source of the claim. If source is absent, the claim is a predefined optional claim. If source is user, the value of name is the extension property from the user object.

name String

The name of the optional claim.

additionalProperties List<String>

List of Additional Properties of the claim. If a property exists in this list, it modifies the behaviour of the optional claim.

essential Boolean

Whether the claim specified by the client is necessary to ensure a smooth authorization experience.

source String

The source of the claim. If source is absent, the claim is a predefined optional claim. If source is user, the value of name is the extension property from the user object.

GetApplicationOptionalClaimSaml2Token

Name string

The name of the optional claim.

AdditionalProperties List<string>

List of Additional Properties of the claim. If a property exists in this list, it modifies the behaviour of the optional claim.

Essential bool

Whether the claim specified by the client is necessary to ensure a smooth authorization experience.

Source string

The source of the claim. If source is absent, the claim is a predefined optional claim. If source is user, the value of name is the extension property from the user object.

Name string

The name of the optional claim.

AdditionalProperties []string

List of Additional Properties of the claim. If a property exists in this list, it modifies the behaviour of the optional claim.

Essential bool

Whether the claim specified by the client is necessary to ensure a smooth authorization experience.

Source string

The source of the claim. If source is absent, the claim is a predefined optional claim. If source is user, the value of name is the extension property from the user object.

name String

The name of the optional claim.

additionalProperties List<String>

List of Additional Properties of the claim. If a property exists in this list, it modifies the behaviour of the optional claim.

essential Boolean

Whether the claim specified by the client is necessary to ensure a smooth authorization experience.

source String

The source of the claim. If source is absent, the claim is a predefined optional claim. If source is user, the value of name is the extension property from the user object.

name string

The name of the optional claim.

additionalProperties string[]

List of Additional Properties of the claim. If a property exists in this list, it modifies the behaviour of the optional claim.

essential boolean

Whether the claim specified by the client is necessary to ensure a smooth authorization experience.

source string

The source of the claim. If source is absent, the claim is a predefined optional claim. If source is user, the value of name is the extension property from the user object.

name str

The name of the optional claim.

additional_properties Sequence[str]

List of Additional Properties of the claim. If a property exists in this list, it modifies the behaviour of the optional claim.

essential bool

Whether the claim specified by the client is necessary to ensure a smooth authorization experience.

source str

The source of the claim. If source is absent, the claim is a predefined optional claim. If source is user, the value of name is the extension property from the user object.

name String

The name of the optional claim.

additionalProperties List<String>

List of Additional Properties of the claim. If a property exists in this list, it modifies the behaviour of the optional claim.

essential Boolean

Whether the claim specified by the client is necessary to ensure a smooth authorization experience.

source String

The source of the claim. If source is absent, the claim is a predefined optional claim. If source is user, the value of name is the extension property from the user object.

GetApplicationPublicClient

RedirectUris List<string>

A list of URLs where user tokens are sent for sign-in, or the redirect URIs where OAuth 2.0 authorization codes and access tokens are sent.

RedirectUris []string

A list of URLs where user tokens are sent for sign-in, or the redirect URIs where OAuth 2.0 authorization codes and access tokens are sent.

redirectUris List<String>

A list of URLs where user tokens are sent for sign-in, or the redirect URIs where OAuth 2.0 authorization codes and access tokens are sent.

redirectUris string[]

A list of URLs where user tokens are sent for sign-in, or the redirect URIs where OAuth 2.0 authorization codes and access tokens are sent.

redirect_uris Sequence[str]

A list of URLs where user tokens are sent for sign-in, or the redirect URIs where OAuth 2.0 authorization codes and access tokens are sent.

redirectUris List<String>

A list of URLs where user tokens are sent for sign-in, or the redirect URIs where OAuth 2.0 authorization codes and access tokens are sent.

GetApplicationRequiredResourceAccess

ResourceAccesses List<Pulumi.AzureAD.Inputs.GetApplicationRequiredResourceAccessResourceAccess>

A collection of resource_access blocks as documented below, describing OAuth2.0 permission scopes and app roles that the application requires from the specified resource.

ResourceAppId string

The unique identifier for the resource that the application requires access to. This is the Application ID of the target application.

ResourceAccesses []GetApplicationRequiredResourceAccessResourceAccess

A collection of resource_access blocks as documented below, describing OAuth2.0 permission scopes and app roles that the application requires from the specified resource.

ResourceAppId string

The unique identifier for the resource that the application requires access to. This is the Application ID of the target application.

resourceAccesses List<GetApplicationRequiredResourceAccessResourceAccess>

A collection of resource_access blocks as documented below, describing OAuth2.0 permission scopes and app roles that the application requires from the specified resource.

resourceAppId String

The unique identifier for the resource that the application requires access to. This is the Application ID of the target application.

resourceAccesses GetApplicationRequiredResourceAccessResourceAccess[]

A collection of resource_access blocks as documented below, describing OAuth2.0 permission scopes and app roles that the application requires from the specified resource.

resourceAppId string

The unique identifier for the resource that the application requires access to. This is the Application ID of the target application.

resource_accesses Sequence[GetApplicationRequiredResourceAccessResourceAccess]

A collection of resource_access blocks as documented below, describing OAuth2.0 permission scopes and app roles that the application requires from the specified resource.

resource_app_id str

The unique identifier for the resource that the application requires access to. This is the Application ID of the target application.

resourceAccesses List<Property Map>

A collection of resource_access blocks as documented below, describing OAuth2.0 permission scopes and app roles that the application requires from the specified resource.

resourceAppId String

The unique identifier for the resource that the application requires access to. This is the Application ID of the target application.

GetApplicationRequiredResourceAccessResourceAccess

Id string

The unique identifier for an app role or OAuth2 permission scope published by the resource application.

Type string

Specifies whether the id property references an app role or an OAuth2 permission scope. Possible values are Role or Scope.

Id string

The unique identifier for an app role or OAuth2 permission scope published by the resource application.

Type string

Specifies whether the id property references an app role or an OAuth2 permission scope. Possible values are Role or Scope.

id String

The unique identifier for an app role or OAuth2 permission scope published by the resource application.

type String

Specifies whether the id property references an app role or an OAuth2 permission scope. Possible values are Role or Scope.

id string

The unique identifier for an app role or OAuth2 permission scope published by the resource application.

type string

Specifies whether the id property references an app role or an OAuth2 permission scope. Possible values are Role or Scope.

id str

The unique identifier for an app role or OAuth2 permission scope published by the resource application.

type str

Specifies whether the id property references an app role or an OAuth2 permission scope. Possible values are Role or Scope.

id String

The unique identifier for an app role or OAuth2 permission scope published by the resource application.

type String

Specifies whether the id property references an app role or an OAuth2 permission scope. Possible values are Role or Scope.

GetApplicationSinglePageApplication

RedirectUris List<string>

A list of URLs where user tokens are sent for sign-in, or the redirect URIs where OAuth 2.0 authorization codes and access tokens are sent.

RedirectUris []string

A list of URLs where user tokens are sent for sign-in, or the redirect URIs where OAuth 2.0 authorization codes and access tokens are sent.

redirectUris List<String>

A list of URLs where user tokens are sent for sign-in, or the redirect URIs where OAuth 2.0 authorization codes and access tokens are sent.

redirectUris string[]

A list of URLs where user tokens are sent for sign-in, or the redirect URIs where OAuth 2.0 authorization codes and access tokens are sent.

redirect_uris Sequence[str]

A list of URLs where user tokens are sent for sign-in, or the redirect URIs where OAuth 2.0 authorization codes and access tokens are sent.

redirectUris List<String>

A list of URLs where user tokens are sent for sign-in, or the redirect URIs where OAuth 2.0 authorization codes and access tokens are sent.

GetApplicationWeb

HomepageUrl string

Home page or landing page of the application.

ImplicitGrants List<Pulumi.AzureAD.Inputs.GetApplicationWebImplicitGrant>

An implicit_grant block as documented above.

LogoutUrl string

The URL that will be used by Microsoft's authorization service to sign out a user using front-channel, back-channel or SAML logout protocols.

RedirectUris List<string>

A list of URLs where user tokens are sent for sign-in, or the redirect URIs where OAuth 2.0 authorization codes and access tokens are sent.

HomepageUrl string

Home page or landing page of the application.

ImplicitGrants []GetApplicationWebImplicitGrant

An implicit_grant block as documented above.

LogoutUrl string

The URL that will be used by Microsoft's authorization service to sign out a user using front-channel, back-channel or SAML logout protocols.

RedirectUris []string

A list of URLs where user tokens are sent for sign-in, or the redirect URIs where OAuth 2.0 authorization codes and access tokens are sent.

homepageUrl String

Home page or landing page of the application.

implicitGrants List<GetApplicationWebImplicitGrant>

An implicit_grant block as documented above.

logoutUrl String

The URL that will be used by Microsoft's authorization service to sign out a user using front-channel, back-channel or SAML logout protocols.

redirectUris List<String>

A list of URLs where user tokens are sent for sign-in, or the redirect URIs where OAuth 2.0 authorization codes and access tokens are sent.

homepageUrl string

Home page or landing page of the application.

implicitGrants GetApplicationWebImplicitGrant[]

An implicit_grant block as documented above.

logoutUrl string

The URL that will be used by Microsoft's authorization service to sign out a user using front-channel, back-channel or SAML logout protocols.

redirectUris string[]

A list of URLs where user tokens are sent for sign-in, or the redirect URIs where OAuth 2.0 authorization codes and access tokens are sent.

homepage_url str

Home page or landing page of the application.

implicit_grants Sequence[GetApplicationWebImplicitGrant]

An implicit_grant block as documented above.

logout_url str

The URL that will be used by Microsoft's authorization service to sign out a user using front-channel, back-channel or SAML logout protocols.

redirect_uris Sequence[str]

A list of URLs where user tokens are sent for sign-in, or the redirect URIs where OAuth 2.0 authorization codes and access tokens are sent.

homepageUrl String

Home page or landing page of the application.

implicitGrants List<Property Map>

An implicit_grant block as documented above.

logoutUrl String

The URL that will be used by Microsoft's authorization service to sign out a user using front-channel, back-channel or SAML logout protocols.

redirectUris List<String>

A list of URLs where user tokens are sent for sign-in, or the redirect URIs where OAuth 2.0 authorization codes and access tokens are sent.

GetApplicationWebImplicitGrant

AccessTokenIssuanceEnabled bool

Whether this web application can request an access token using OAuth 2.0 implicit flow.

IdTokenIssuanceEnabled bool

Whether this web application can request an ID token using OAuth 2.0 implicit flow.

AccessTokenIssuanceEnabled bool

Whether this web application can request an access token using OAuth 2.0 implicit flow.

IdTokenIssuanceEnabled bool

Whether this web application can request an ID token using OAuth 2.0 implicit flow.

accessTokenIssuanceEnabled Boolean

Whether this web application can request an access token using OAuth 2.0 implicit flow.

idTokenIssuanceEnabled Boolean

Whether this web application can request an ID token using OAuth 2.0 implicit flow.

accessTokenIssuanceEnabled boolean

Whether this web application can request an access token using OAuth 2.0 implicit flow.

idTokenIssuanceEnabled boolean

Whether this web application can request an ID token using OAuth 2.0 implicit flow.

access_token_issuance_enabled bool

Whether this web application can request an access token using OAuth 2.0 implicit flow.

id_token_issuance_enabled bool

Whether this web application can request an ID token using OAuth 2.0 implicit flow.

accessTokenIssuanceEnabled Boolean

Whether this web application can request an access token using OAuth 2.0 implicit flow.

idTokenIssuanceEnabled Boolean

Whether this web application can request an ID token using OAuth 2.0 implicit flow.

Package Details

Repository
https://github.com/pulumi/pulumi-azuread
License
Apache-2.0
Notes

This Pulumi package is based on the azuread Terraform Provider.