

Enterprise Apps: using OpenIDConnect and OAuth, you allow a cloud-based application to trust your Azure AD for user authentication the trusting app is known as an enterprise app object in Azure AD.Groups: you define a security group in Azure AD, which can be used to specify permissions to SharePoint sites for example.Users: you create a user object in Azure AD, and from there allow the user to authenticate to the Azure Portal, to start using Office 365,….The most common ones are Users and Groups, but you can also have Applications in there, also known as Enterprise Apps.


Azure AD IdentityĪzure AD is the trusted Identity Object store, in which you can create different Identity Object types. In this article, I want to clarify one of the more confusing concepts in Azure and more specifically around the Azure Identity objects known as Service Principals and Managed Identities.īefore zooming in on these, let’s take a step back and look at the different Azure Identity Objects we have available in Azure Active Directory today.
