A peat-smoke kiln API works in the home tenant after app registration, then fails in a customer tenant that has no enterprise application for that API. Which identity distinction should the developer apply?
Select an answer to reveal the explanation.
Short Explanation
The application object is the blueprint in the home workshop; each customer tenant gets its own service principal “install” of that app. Without that enterprise app/service principal, the kiln API has nothing to consent to in that tenant.
Full Explanation
In the Microsoft identity platform, the application object is created in the home tenant. A service principal is the local instance in each tenant where the app is used. Customer tenants do not automatically share the home service principal, and storage accounts do not replace this distinction.