StudyToCert

All certifications / SC-300 / Lessons

Microsoft Certified: Identity and Access Administrator Associate SC-300 (skills outline of April 27, 2026) · Domain 3: Plan and implement workload identities

Service principals and app registrations: application objects, client secrets vs certificates vs federated credentials

▶ Watch the overview video

Last reviewed September 25, 2026 · Leer en español

When a developer registers an app in Microsoft Entra ID, two related objects appear, and the exam expects you to know the difference. The application object is the global definition of the app. It lives only in the app's home tenant, the tenant where it was registered, and describes the app: its name, application (client) ID, redirect URIs, the permissions it requests, app roles it exposes and its credentials. You manage it under App registrations.

Free account

Keep reading for free

Create a free StudyToCert account to read the rest of this lesson: 4 more sections, 5 key terms, a real-world example, an exam tip and self-check questions. Every lesson, lab and practice test is free with an account.

Sign up free Log in

Study SC-300 for free
A week-by-week plan with every lesson, quizzes, checkpoint tests, a practice exam and hands-on labs.
Open the SC-300 study plan