Create Azure AD Application.
module "application" {
source = "innovationnorway/application/azuread"
name = "example"
group_membership_claims = "All"
api_permissions = [
{
name = "Microsoft Graph"
oauth2_permissions = [
"Directory.Read.All",
"User.Read"
]
app_roles = [
"Directory.Read.All"
]
}
]
}
Name | Type | Description |
---|---|---|
name |
string |
The display name of the application. |
homepage |
string |
The URL of the application's homepage. |
identifier_uris |
list |
List of unique URIs that Azure AD can use for the application. |
reply_urls |
list |
List of URIs to which Azure AD will redirect in response to an OAuth 2.0 request. |
available_to_other_tenants |
bool |
Whether the application can be used from any Azure AD tenants. Default: false . |
native |
bool |
Whether the application can be installed on a user's device or computer (aka public client). Default: false . |
oauth2_allow_implicit_flow |
bool |
Whether to allow implicit grant flow for OAuth2. Default: false . |
group_membership_claims |
string |
Configures the groups claim issued in a user or OAuth 2.0 access token that the app expects. The options are: None , SecurityGroup and All . Default: SecurityGroup . |
api_permissions |
list |
List of API permissions. |
app_roles |
list |
List of App roles. |
The api_permissions
object accepts the following keys:
Name | Type | Description |
---|---|---|
name |
string |
Name of the API. |
oauth2_permissions |
list |
List of OAuth2 permissions (scopes). |
app_roles |
list |
List of App roles. |
The app_roles
object must have the following keys:
Name | Type | Description |
---|---|---|
name |
string |
Name of the the App role. |
description |
string |
Description of the App role. |
member_types |
list |
List of allowed member types. The options are: User , Application . |