Application management documentation

Microsoft Entra ID is an Identity and Access Management (IAM) system. It provides a single place to store information about digital identities. You can configure your software applications to use Microsoft Entra ID as the place where user information is stored.

Fundamentals

Overview

• What is application management?

Concept

• What type of apps does Microsoft Entra ID support?
• What is single sign-on?

Develop an app

Concept

• Authentication and authorization concepts

How-To Guide

• Build an app using Microsoft identities or social accounts

Integrate an app with the tenant

How-To Guide

• Get started with app integration
• Add a pre-integrated cloud application
• Register your app
• Migrate AD FS apps to Microsoft Entra ID

Configure an app

How-To Guide

• Configure app properties
• Assign users and groups
• Provision an app
• Configure My Apps

Training

• Enable single sign-on

Secure an app

How-To Guide

• Set up Conditional Access
• Set up Multi-Factor Authentication
• Manage certificates
• Set up tenant restrictions
• Configure token encryption
• Use Defender for Cloud Apps
• Act on overprivileged and suspicious app

Manage app access

Overview

• Identity governance
• User and admin consent

How-To Guide

• Assign roles
• Configure user consent
• Configure admin consent
• Configure permissions classification
• Manage entitlement

Training

• Configure admin consent workflow

Maintain an app

How-To Guide

• View, search, sort, filter list of apps in a tenant
• Troubleshoot sign-in errors
• Disable user sign-in for an app
• Remove user access to an app
• Delete an app

Monitor an app

Concept

• Sign in logs
• Usage and insights report
• Audit logs
• Provisioning logs

How-To Guide

• Access activity logs
• Download logs
• Set up access reviews
• Assign owners

Remote access to on-premises apps

Concept

• Application Proxy

How-To Guide

• Plan application Proxy deployment
• Set up connectors
• Configure single sign-on
• Publish native client applications
• Publish claims-aware applications