Reference
Application registration
All Entra ID application registrations
Part of the Entra ID inventory.
Scan settings
| Default scanning interval | Allowed scanning intervals | Data removal during incremental scan |
|---|---|---|
| Bi-Weekly | Daily, Weekly, Bi-Weekly, Monthly, Never, Initial | Yes |
Properties
| Property | Type | Description | Automation placeholder |
|---|---|---|---|
| Application id | String | The unique identifier for the application that is assigned to an application by Entra ID. | {{Applicationregistration.AppId}} |
| Id | String | The unique identifier for the application. | {{Applicationregistration.AppRegistrationId}} |
| Created date | DateTime | The date and time the application was registered. The DateTimeOffset type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z. | {{Applicationregistration.CreatedDateTime}} |
| Initially Scanned | DateTime | Shows when this object was initially found in a scan. | {{Applicationregistration.CreatedTime}} |
| Deleted date | DateTime | The date and time the application was deleted. The DateTimeOffset type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z. | {{Applicationregistration.DeletedDateTime}} |
| Description | String | Free text field to provide a description of the application object to end users. | {{Applicationregistration.Description}} |
| Display Name | String | {{Applicationregistration.DisplayName}} | |
| Last scan update | DateTime | Shows when this object was last updated in a scan. If an object is found during a scan but no property has been changed this date will not change. | {{Applicationregistration.LastModifiedTime}} |
| Risk Score | Int32 | Stores risk score | {{Applicationregistration.RiskScore}} |
| Risk Score Update | DateTime | Stores risk score update | {{Applicationregistration.RiskScoreLastUpdate}} |
| Risk Score Value | String | Stores risk score value like Low_Low | {{Applicationregistration.RiskScoreValue}} |
| Sign in audience | String | Specifies the Microsoft accounts that are supported for the current application. The possible values are: AzureADMyOrg, AzureADMultipleOrgs, AzureADandPersonalMicrosoftAccount (default), and PersonalMicrosoftAccount. | {{Applicationregistration.SignInAudience}} |
| Verified publisher | Verified Publisher | Specifies the verified publisher of the application. | {{Applicationregistration.VerifiedPublisher}} |
| Verified publisher name | String | The verified publisher name from the app publisher's Partner Center account. | {{Applicationregistration.VerifiedPublisherName}} |
Relations
| Relation | Service | Description |
|---|---|---|
| Registration Certificate | Entra ID | All application registration certificate of Entra ID |
| Client secret | Entra ID | All client secrets registered in Entra ID |
| Verified Publisher | Entra ID | All verified publishers of application registrations in Entra ID |
| Verified Publisher | Entra ID | All verified publishers of application registrations in Entra ID |
| User | Microsoft 365 | Owners of Entra ID application |
Segments
This object does currently not have any segments.
Actions
This object does currently not have any actions.
Policies that check this object
| Policy | Severity | Description |
|---|---|---|
| Applications with client secrets that are about to expire | High | Shows Entra ID applications where client secrets expire in the next 30 days |
| Applications with expired certificates | High | Shows Entra ID applications with expired certificates |
| Applications with expired client secrets | High | Shows Entra ID applications with expired client secrets |
| Application registrations without owners | Medium | Shows Application registrations without any owners |
| Applications with certificates that are about to expire | High | Shows Entra ID applications where certificates expire in the next 30 days |