application

avinor/application/azuread

Terraform Module HCL AZUREAD

Terraform module to create an application in Azure AD.

Install

module "application" {

source = "avinor/application/azuread"

version = "3.0.4"

}

plain text: /constructs/tfmod-avinor-application-azuread/install.txt

⭐ Source on GitHub 📦 Registry page

README

AzureAD Application A general module to create an Azure AD application and optionally assign it roles. It will create a service principal associated with the application and create a password for application. Requirements - Requires access to Azure AD to create application. - Owner required when assigning roles using assignments variable Usage ``terraform module "simple" { source = "avinor/application/azuread" version = "3.0.2" name = "simple" } ` Assigning roles for application: `terraform module "simple" { source = "avinor/application/azuread" version = "3.0.2" name = "simple" redirect_uris = ["https://simple.example.com/"] end_date = "2022-01-01T01:02:03Z" assignments = [ { scope = "/subscriptions/xxxx" role_definition_name = "Contributor" } ] } ` Assignments Usign the assignments` vari

Inputs (13)

Name	Type	Description	Default
name	string	Name of the application.	required
required_resource_access	list( object({ resou	Required resource access for this application.	required
identifier_uris	list(string)	A list of user-defined URI(s) that uniquely identify a Web application within it	`[]`
redirect_uris	list(string)	A list of URLs that user tokens are sent to for sign in, or the redirect URIs th	`[]`
id_token_issuance_enabled	bool	Whether this web application can request an ID token using OAuth 2.0 implicit fl	`false`
type	string	Type of an application: `webapp/api` or `native`.	`"webapp/api"`
assignments	list(object({ scope	List of role assignments this application should have access to.	`[]`
app_roles	list(object({ allowed_memb	List of app roles to associate to the application	`[]`
access_token_issuance_enabled	bool	Does this Azure AD Application allow OAuth2.0 implicit flow tokens?	`false`
group_membership_claims	list(string)	Configures the groups claim issued in a user or OAuth 2.0 access token that the	`[ "SecurityGroup" ]`
sign_in_audience	string	The Microsoft account types that are supported for the current application. Must	`"AzureADMyOrg"`
end_date	string	The End Date which the Password is valid until, formatted as a RFC3339 date stri	`null`
homepage	string	The URL to the application's home page. If no homepage is specified this default	`null`