The blade in an app registration where optional claims like groups and email are added to issued tokens. App roles are configured separately.
Read more: Microsoft Learn
In the Ultra Transcenders books
Each book explains Token configuration in context, with comparison tables and the common traps.
Terms in this definition
- App registration
Object in Microsoft Entra ID describing an app's identity, the permissions it needs and which account types it supports; multi-tenant apps and OpenID Connect sign-in depend on it.
- WHERE
Limits a SELECT, UPDATE or DELETE to just the rows meeting a condition. Omit it, and the statement hits every row.
- Optional claims
Additional claims, such as
ipaddr, included in tokens by configuring them on the Token configuration blade of an app registration or inoptionalClaimswithin the manifest. - LIKE
Compares strings with a pattern that can contain the % and _ wildcards. Because it only understands character patterns, searching big volumes of text this way is much slower than using full-text search.
- App roles
Roles declared by an API in its app registration. When one app calls another using client credentials, the assigned roles appear in the token's
rolesclaim.