A municipal-records team registered an API under App registrations, but a contractor searched only Enterprise applications and reported that the app does not exist. How should the security engineer explain the relationship in this tenant?
Select an answer to reveal the explanation.
Short Explanation
App registration is the blueprint; the enterprise app is the badge that blueprint wears inside your tenant. Register the API and Entra also stamps out a service principal—search both blades before declaring it missing.
Full Explanation
In Microsoft Entra ID, an app registration creates an application object. A corresponding service principal (enterprise application) is the tenant-local identity used for sign-in, assignment, and role grants. Looking only under Enterprise applications can miss context if naming differs, but single-tenant registrations still produce a service principal in the home tenant. Key Vault and MSAL samples are not substitutes for understanding application object versus service principal.