Skip to content

nicro950/terraform-azuread-application

Repository files navigation

Azure AD Application

Create Azure AD Application.

Example Usage

module "application" {
  source = "innovationnorway/application/azuread"

  name = "example"

  group_membership_claims = "All"

  api_permissions = [
    {
      name = "Microsoft Graph"
      oauth2_permissions = [
        "Directory.Read.All",
        "User.Read"
      ]
      app_roles = [
        "Directory.Read.All"
      ]
    }
  ]
}

Arguments

Name Type Description
name string The display name of the application.
homepage string The URL of the application's homepage.
identifier_uris list List of unique URIs that Azure AD can use for the application.
reply_urls list List of URIs to which Azure AD will redirect in response to an OAuth 2.0 request.
available_to_other_tenants bool Whether the application can be used from any Azure AD tenants. Default: false.
native bool Whether the application can be installed on a user's device or computer (aka public client). Default: false.
oauth2_allow_implicit_flow bool Whether to allow implicit grant flow for OAuth2. Default: false.
group_membership_claims string Configures the groups claim issued in a user or OAuth 2.0 access token that the app expects. The options are: None, SecurityGroup and All. Default: SecurityGroup.
api_permissions list List of API permissions.
app_roles list List of App roles.

The api_permissions object accepts the following keys:

Name Type Description
name string Name of the API.
oauth2_permissions list List of OAuth2 permissions (scopes).
app_roles list List of App roles.

The app_roles object must have the following keys:

Name Type Description
name string Name of the the App role.
description string Description of the App role.
member_types list List of allowed member types. The options are: User, Application.