| Table of Contents |
|---|
An Azure Active Directory (Azure AD) service principal is the local representation of an application object in a tenant or directory. It's the identity of the application instance.
There are three ways of integrating Azure AD
Azure AD Legacy
Azure Ad AD Non- CSP
Azure AD CSP
...
Differences
How are these three different?
Azure AD CSP implies licencing
Licenses Azure AD through a CSP partner
Azure AD non-CSP refers to directly acquiring
Directly acquires Azure AD licences from Microsoft.
In Azure AD Legacy, the token created from Cybercns is limited to 90 days, whereas in Azure AD, CSPs and non-CSPs can be selected from the list for a number of days
CyberCNS creates an application in MS Azure Portal; If you have already integrated using this option then that means you have opted by Azure AD Legacy.
Azure AD Legacy CSP or Non-CSP | Azure AD (New) CSP or Non-CSP | |
|---|---|---|
Application in MS Azure Portal | CyberCNS creates an application in the MS Azure Portal and Partner consents | Partner creates the application in MS Azure Portal by themselves (instructions provided in the documentation here) |
Permissions required for the CyberCNS application in MS Azure Portal | Maximum permissions of Read-Write | A minimum set of permissions (Read in most cases, Write only when absolutely required) |
Validity of Token | 90 days, one will have to renew the token after 90 days for AD sync to continue | Validity is set by the partner themselves and has to be renewed after the validity expires, for AD sync to continue |
Azure AD Legacy
If you already have a Azure AD integration then you could continue with this.
...