Will Enterprise Applications ever just "show up" upon consent?

Miguel Alex Cantu 21 Reputation points
2019-11-15T13:29:23.637+00:00

We have a couple of Enterprise Applications - "Zoom1" and "Zoom2" we'll call them - that we believe might have been auto generated upon a user's consent when logging in with their corporate email. Is that something that Azure does, or is our imagination getting the best of us?

-Alex

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,427 questions
0 comments
Accepted answer
  1. Joonas Westlin 181 Reputation points MVP
    2019-11-15T13:56:42.117+00:00

    Yes, when a user or admin consents to a multi-tenant application, a service principal (enterprise app) is created in your tenant. Permissions granted within your tenant are granted to this service principal.

    3 people found this answer helpful.

2 additional answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Miguel Alex Cantu 21 Reputation points
    2019-11-18T21:10:22.843+00:00

    If anyone is curious. There is some more information about this behavior here:

    https://learn.microsoft.com/en-us/azure/active-directory/develop/active-directory-how-applications-are-added

    0 comments
  2. MrAzureAD 81 Reputation points
    2019-11-21T05:09:27.253+00:00

    Actually, user consent should be disabled by default and enabled only if you know what you are doing. At least our users would not read nor understand the permission screen and consent to any application. This opens the door to data leakage. The admin consent experience has some issues, but there were some recent improvements that make it more usable.

    Just my 2ct,
    MrAzureAD

    0 comments