Why does app service create a secret in app registration when setting up authentication?

Question

When setting up Microsoft identity as the identity provider for my function app, I can notice that the app service (that is supporting the function app) creates a secret for that app registration. Why is this secret created and is it used during authentication of user or validation of token at a later point?

Answer 1

@Prakamya Aishwarya Thanks for reaching out. I believe you are talking about the Generated by App Service description secret that gets created when you register the app while adding the Microsoft Identity provider on your function app. You can leverage the existing secret that is created for you or create a new secret for the authentication of user depending on the Authentication flow. For more details about the Authentication and authorization you can refer to this document.