how to create a client ID and Client Secret for MultiTenant App Registration

Question

how to create a client ID and Client Secret for MultiTenant App Registration

Tim Crumley 0

kagiyama yutaka 5,330 Reputation points

2026-07-24T23:52:32.4666667+00:00

Could you add a bit more information?

Right now I can’t see how this app is supposed to run, so the key pieces are missing. I need to know whether you’re building a web app, an API, or a daemon, what authentication flow you plan to use, whether other tenants are expected to grant admin consent, and if the app is meant to use delegated permissions or application permissions.
Venkatanaidu Madamanchi 85 Reputation points Microsoft External Staff Moderator

2026-07-28T01:06:29.8366667+00:00

Hello @Tim Crumley

Could you please let us know if the comment above resolved your issue? If you need any further assistance, feel free to reach out—we're always here to support you.

If you found the comment helpful, please consider clicking "Upvote it."

Thank you.
Venkatanaidu Madamanchi 85 Reputation points Microsoft External Staff Moderator

2026-08-05T07:07:32.89+00:00

Hello @Tim Crumley

Could you please let us know whether the suggested solution helped resolve your issue? We have not yet received an update and would appreciate hearing the current status of the issue.

If you are still experiencing the problem or need any further assistance, please feel free to reply with any updates. We will be happy to continue working with you until the issue is resolved.

If you found our previous response helpful, we would also appreciate it if you could consider upvoting the answer, as it may help other community members facing a similar issue.

We look forward to hearing from you.

Regards,

Venkat.M

Mail: v-vemadamanc@microsoft.com

2 answers

Your answer

kagiyama yutaka 5,330 Reputation points

2026-07-24T23:52:32.4666667+00:00

Could you add a bit more information?

Right now I can’t see how this app is supposed to run, so the key pieces are missing. I need to know whether you’re building a web app, an API, or a daemon, what authentication flow you plan to use, whether other tenants are expected to grant admin consent, and if the app is meant to use delegated permissions or application permissions.
Venkatanaidu Madamanchi 85 Reputation points Microsoft External Staff Moderator

2026-07-28T01:06:29.8366667+00:00

Hello @Tim Crumley

Could you please let us know if the comment above resolved your issue? If you need any further assistance, feel free to reach out—we're always here to support you.

If you found the comment helpful, please consider clicking "Upvote it."

Thank you.
Venkatanaidu Madamanchi 85 Reputation points Microsoft External Staff Moderator

2026-08-05T07:07:32.89+00:00

Hello @Tim Crumley

Could you please let us know whether the suggested solution helped resolve your issue? We have not yet received an update and would appreciate hearing the current status of the issue.

If you are still experiencing the problem or need any further assistance, please feel free to reply with any updates. We will be happy to continue working with you until the issue is resolved.

If you found our previous response helpful, we would also appreciate it if you could consider upvoting the answer, as it may help other community members facing a similar issue.

We look forward to hearing from you.

Regards,

Venkat.M

Mail: v-vemadamanc@microsoft.com

Answer 1

For a multitenant app registration in Microsoft Entra ID, create the app registration first, then add a client secret.

Sign in to the Azure portal or Microsoft Entra admin center.
Go to Microsoft Entra ID / Identity > Applications > App registrations.
Select New registration.
Enter a name for the application.
For Supported account types, select Accounts in any organizational directory to make it multitenant.
If required for the app flow, add a Web platform and configure the Redirect URI.
- For some multitenant web app scenarios, the redirect URI must point to a live web app endpoint.
- In the Defender for Endpoint multitenant example, https://portal.azure.com is added as a redirect URI.
Select Register.
After the app is created, copy the Application (client) ID from the app overview page.
To create the client secret, open Certificates & secrets > Client secrets > New client secret.
Enter a description, choose an expiration, and select Add.
Immediately copy the secret value and store it securely. It is shown only once and cannot be retrieved later.

If the app must be used across multiple customer tenants, each tenant must grant consent to the app. In the Defender for Endpoint multitenant scenario, approval is required in each tenant where the app will run.

Answer 2

Hello @Tim Crumley

Thank you for reaching out to the Microsoft Q&A team,

creating a multi-tenant app registration and generating the associated Client ID and Client Secret is a straightforward process. Please follow the steps below:

Sign into the Azure portal and go to Microsoft Entra ID > App registrations.
Click New registration.
- Give your app a name (Enter a meaningful Name)
- Under Supported account types, pick Accounts in any organizational directory (Any Azure AD directory – Multitenant).
- (Optionally) add a Redirect URI if you need one.
- Hit Register.
On the app’s Overview page, copy down the Application (client) ID and Directory (tenant) ID.
In the left menu, choose Certificates & secrets.
Click New client secret.
- Enter a description (e.g. “MyApp Secret”).
- Pick an expiry (max 24 months).
- Click Add, then immediately copy the secret Value somewhere safe-this value won’t show again after you leave the page.
For a best practice Microsoft recommends using certificates or managed identities instead of client secrets for production workloads whenever possible, as they provide a more secure authentication mechanism.

References:

Thanks

Venkat.M