A cross-product view of Microsoft Entra changes related to Developer.
- GitHub Actions. First, configure a trust relationship between your [user-assigned managed identity](workload-identity-federation-create-trust-user-assigned-managed-identity.md) or [application](workload-identity-federation-create-trust.md) in Microsoft Entr…
You can automatically deliver proxy settings and certificate authority trust settings in Microsoft Edge by using an Intune mobile application management (MAM) policy. The policy can take advantage of the Explicit Forward Proxy feature of Global Secure Access.
After creating a new application proxy application, grant admin consent for the **User.Read** delegated permission in the Microsoft Entra admin center or using the Microsoft Graph PowerShell.
1. Under Redirect URIs, add the redirect URI of your application. For example, `https://localhost:8080/`.
This article shows the new and updated documentation for the Microsoft Entra application management.
ai-usage: ai-assisted
Learn how to publish your application in Microsoft Entra application gallery.
Learn how to use the Microsoft Entra Auth SDK (sidecar) to secure an Amazon Bedrock AI agent with its own identity for calling downstream APIs.
Learn how to validate Microsoft Entra Agent ID tokens in a downstream API by checking the signature, issuer, audience, and agent identity marker claim.
Learn how autonomous agents acquire tokens using the Microsoft Entra ID Auth SDK (sidecar) to call downstream APIs independently.
- [Configure Entra ID Auth SDK (sidecar) for agent identities](microsoft-entra-sdk-for-agent-identities.md)
Learn how to configure daemon apps that call web APIs using secrets, certificates, or client assertions.
This article shows the new and updated documentation for the Microsoft Entra application management.
Learn how to build a desktop app that calls web APIs to acquire a token for the app
Learn how to build a mobile app that calls web APIs. (Get a token for the app.)
Learn how to build a desktop app that calls web APIs to acquire a token for the app by using Web Account Manager.
Learn how to build a desktop app that calls web APIs to acquire a token for the app interactively.
Learn how to build a desktop app that calls web APIs to acquire a token for the app using device code flow
Learn how to build a daemon app that calls web APIs (acquiring tokens)
Learn how to add app roles to an application registered in Microsoft Entra ID. Assign users and groups to these roles, and receive them in the 'roles' claim in the token.
Add linked single sign-on to an application in Microsoft Entra ID.
Use Application discovery to detect the applications accessed by users and create separate private applications.
Learn answers to frequently asked questions (FAQ) about managing certificates for apps using Microsoft Entra ID as an Identity Provider (IdP).
Learn about the relationship between application and service principal objects in Microsoft Entra ID.
Learn how to build a single-page application that calls a web API
Learn how to build a mobile app that calls web APIs. (Call a web API.)
Learn how to configure and set up a custom email provider with the One Time Passcode Send event type.
Learn how to build a web API that calls web APIs (app's code configuration)
Learn how to configure the code of a web app that calls web APIs
Learn how to configure an application to trust a managed identity in Microsoft Entra ID.
Learn about multi-instancing, which is needed for configuring multiple instances of the same application within a tenant.
Learn how to configure the code of a desktop app that calls web APIs
Learn how to configure F5 BIG-IP Access Policy Manager and Microsoft Entra ID for secure hybrid access (SHA) to form-based applications.
Learn to implement secure hybrid access (SHA) with single sign-on (SSO) to header-based applications using F5 BIG-IP Easy Button Guided Configuration.
Learn to implement secure hybrid access (SHA) with single sign-on (SSO) to Kerberos applications using F5 BIG-IP Easy Button guided configuration.
Configure user consent settings in Microsoft Entra ID to control when and how users grant permissions to your organization's data. Secure your environment with step‑by‑step guidance.
A Microsoft Entra documentation page was updated: Configure Microsoft Edge with Explicit Forward Proxy (preview) by using an Intune application management policy.
Learn how to configure Microsoft Entra External ID with Azure Web Application Firewall.
Learn how to configure your mobile app's code to call a web API
Configure app management policies in Microsoft Entra ID to set restrictions on how apps and service principals in your tenant can be configured. Secure your environment with step‑by‑step guidance.
Learn how to build a single-page application (app's code configuration)
Learn to configure the F5 BIG-IP Access Policy Manager (APM) and Microsoft Entra ID for secure hybrid access to header-based applications that also require session augmentation through Lightweight Directory Access Protocol (LDAP) sourced attributes.
A Microsoft Entra documentation page was updated: Configure Workday Mobile Application for Single sign-on with Microsoft Entra ID.
Learn more about the Microsoft Entra consent experiences to see how you can use it when managing and developing applications on Microsoft Entra ID
Create an enterprise application using the client ID for a multitenant application.
A Microsoft Entra documentation page was updated: Customer intent: As an IT administrator, I want to learn how to configure single sign-on between Microsoft Entra ID and FortiWeb Web Application Firewall so that I can control who has access to FortiWeb Web Ap…
A Microsoft Entra documentation page was updated: Customer intent: As an IT administrator, I want to learn how to configure single sign-on between Microsoft Entra ID and Mapiq Essentials so that I can control who has access to Mapiq Essentials, enable automat…
A Microsoft Entra documentation page was updated: Customer intent: As an IT administrator, I want to learn how to configure single sign-on between Microsoft Entra ID and Maximo Application Suite so that I can control who has access to Maximo Application Suite…
A Microsoft Entra documentation page was updated: Customer intent: As an IT administrator, I want to learn how to configure single sign-on between Microsoft Entra ID and Papirfly SSO so that I can control who has access to Papirfly SSO, enable automatic sign-…
A Microsoft Entra documentation page was updated: Customer intent: As an organization administrator, I want to customize the invitation process for external users using the Microsoft Graph REST API, so that I can tailor the onboarding experience and control t…
Describes directory extension attributes that are used for sending user data to applications in token claims.
Include file warning that access tokens for Microsoft Graph should be considered opaque and should never be validated by customer code. Only Microsoft Graph validates Microsoft Graph access tokens.
Learn about the customizable ways to deploy applications to end users in your organization with Microsoft Entra ID.
Learn how to acquire a token for a web app that calls web APIs
This article is a getting started guide for integrating Microsoft Entra ID with on-premises applications, and cloud applications.
Learn how to grant tenant-wide consent to an application so that end-users aren't prompted for consent when signing in to an application.
What does it mean for an application to be added to Microsoft Entra ID and how do they get there?
Learn how to build a daemon app that calls a web API.
Learn how to configure the code for your daemon application that calls web APIs (app configuration)
A Microsoft Entra documentation page was updated: How to use managed identities for Azure resources on an Azure VM with Azure SDKs .
Learn how to implement role-based access control in your applications.
manager: pmwongera
manager: pmwongera
manager: pmwongera
Discover how to configure agent identities for enterprise applications in Microsoft Entra ID. Assign roles, manage permissions, and streamline app interactions.
Comprehensive guide for the Microsoft Entra ID Windows Account Manager (WAM) API, detailing its usage, parameters, and integration in Windows applications.
This article describes phase 1 of planning migration of applications from AD FS to Microsoft Entra ID
This article describes phase 2 of planning migration of applications from AD FS to Microsoft Entra ID
This article describes phase 3 of planning migration of applications from AD FS to Microsoft Entra ID
This article describes phase 4 of planning migration of applications from AD FS to Microsoft Entra ID
Learn about tenant-level restrictions and controls for users, groups, and applications, along with policy management in a cloud-based portal.
These PowerShell samples are used for apps you manage in your Microsoft Entra tenant. You can use these sample scripts to find expiration information about secrets and certificates.
Learn best practices for transitioning from VPN replacement with Quick Access to per-application segmentation using Microsoft Entra Private Access.
Learn about the properties of an enterprise application in Microsoft Entra ID.
Learn to add pre-integrated apps to your Microsoft Entra tenant with clear, step-by-step instructions.
Download and run a code sample that shows how an ASP.NET web app can sign in Microsoft Entra users.
Download and run a code sample that shows how an ASP.NET web app can sign in Microsoft Entra users.
In this quickstart, learn how a JavaScript Angular single-page application (SPA) can sign in users of personal accounts, work accounts, and school accounts by using the authorization code flow and call Microsoft Graph.
In this quickstart, learn how a JavaScript Angular single-page application (SPA) can sign in users of personal accounts, work accounts, and school accounts by using the authorization code flow and call Microsoft Graph.
In this quickstart, learn how a JavaScript React single-page application (SPA) can sign in users of personal accounts, work accounts, and school accounts by using the authorization code flow and call Microsoft Graph.
In this quickstart, learn how a JavaScript React single-page application (SPA) can sign in users of personal accounts, work accounts, and school accounts by using the authorization code flow and call Microsoft Graph.
In this quickstart, learn how a JavaScript single-page application (SPA) can sign in users of personal accounts, work accounts, and school accounts by using the authorization code flow.
In this quickstart, learn how a JavaScript single-page application (SPA) can sign in users of personal accounts, work accounts, and school accounts by using the authorization code flow.
Restore a soft deleted enterprise application in Microsoft Entra ID.
Learn how to review and restore revoked permissions for an application in Microsoft Entra ID.
Understand why an app management policy may block the addition of an identifier URI, and learn more about the policy and the restrictions it enforces on identifier URIs
Configure Microsoft Entra Private Access to tunnel specific application traffic through a private network for application's network-based access control policy.
Learn how to manage your external tenant by calling the Azure REST API.
In this tutorial, you learn how to set up an Android application to run in shared device mode.
Learn about how to prepare your Node.js client daemon app, then configure it to acquire an access token for calling a web API.
Describes the Microsoft Entra app manifest (Microsoft Graph format), which represents an application's identity configuration in a Microsoft Entra tenant.
Describes the Microsoft Entra app manifest, which represents an application's identity configuration in a Microsoft Entra tenant.
Learn how to validate Microsoft Entra Agent ID tokens in a downstream API by checking the signature, issuer, audience, and agent identity marker claim.
Understand how to view all applications using your Microsoft Entra tenant for identity management.
1. Identify the permissions your app requires, their permission IDs, and whether they're app roles (application permissions) or delegated permissions. For example, if you want to request Microsoft Graph permissions, see [Microsoft Graph permissions](/graph/pe…
Learn how to configure single sign-on between Microsoft Entra ID and Code42.
Learn how to configure single sign-on between Microsoft Entra ID and FortiWeb Web Application Firewall.
Learn how to configure single sign-on between Microsoft Entra ID and FTAPI.
Learn how to configure single sign-on between Microsoft Entra ID and Mapiq Essentials.
Learn how to configure single sign-on between Microsoft Entra ID and Mapiq.
Learn how to configure single sign-on between Microsoft Entra ID and Maximo Application Suite.
Learn how to configure single sign-on between Microsoft Entra ID and Papirfly SSO.
Learn how to configure single sign-on between Microsoft Entra ID and Sapient.
Learn how to configure single sign-on between Microsoft Entra ID and Veracode.
Learn how to configure single sign-on between Microsoft Entra ID and Workday Mobile Application.
:::image type="content" source="media/how-to-validate-agent-tokens-downstream-api/agent-token-flow-to-downstream-api.png" alt-text="Diagram showing the agent caller sending a Bearer token to the weather API, which verifies the token and calls Open-Meteo." lig…
Device code flow is rarely used by customers, but is frequently used by attackers. Enabling this Microsoft-managed policy for your organization helps remove this attack vector.
1. Under **Assignments**, select **Users or workload identities**.
| Schema extensions |<ul><li>String-type extensions can have a maximum of 256 characters. </li><li>Binary-type extensions are limited to 256 bytes.</li><li>Only 100 extension values, across *all* types and *all* applications, can be written to any single Micr…
author: kenwith
A Microsoft Entra documentation page was updated: Licensing Application Proxy.
