A solution architect explains the relationship between App registrations and Enterprise apps like this: “The app registration creates an application…

The statement accurately describes the relationship between application objects (created via App Registrations) and service principals (represented as Enterprise Applications) in Microsoft Entra ID. The application object serves as the global template or definition for an application. When that application is granted consent to access resources in a tenant, a service principal is created in that tenant. This service principal is the local instance of the application where tenant-specific configurations, such as user assignments, permissions, and single sign-on (SSO) settings, are managed. Developers work on the app registration to define the application's core identity, while administrators work on the enterprise application to manage its access and integration within their specific tenant.

The alternative, False, is incorrect because every component of the architect's explanation aligns with the official Microsoft Entra identity platform architecture and terminology. There are no inaccuracies in the description of the roles of application objects and service principals.

1. Microsoft Learn. "Application and service principal objects in Microsoft Entra ID." Microsoft Docs. Accessed May 2024. In the "Application and service principal relationship" section

it states

"The application object is the global representation of your application for use across all tenants

and the service principal is the local representation for use in a specific tenant."

2. Microsoft Learn. "Quickstart: Register an application with the Microsoft identity platform." Microsoft Docs. Accessed May 2024. This guide details the process of creating an app registration (the application object) and notes

"When you register your application

an application object and a service principal object are automatically created in your home tenant."