Sign in

Terminology Index

Glossary

1 term tagged "app-registration-security"

Open concept maps

Showing 1-1 of 1 term

A
1

App Registration Security

Securing application registrations in Microsoft Entra ID (Azure AD), the entries that let apps authenticate and request permissions. Over-permissioned or stale registrations and their secrets are a common cloud-identity attack path.

Each registration can hold credentials and consent to permissions that, if excessive, let an attacker act as the app across the tenant. Securing them means granting least-privilege API permissions, protecting and rotating client secrets and certificates, and reviewing registrations and their owners regularly.

Introduced in: Directory Services Security

Examples

  • Removing a registration's unused high-privilege Graph permissions.
  • Rotating and securely storing an app registration's client secret.
  • Reviewing who owns each registration and disabling unused ones.
iamintermediateapp-registration-security

No related terms linked yet.