Register a public client application in Microsoft Entra ID for Azure API for FHIR

In this article, you learn how to register a public application in Microsoft Entra ID.

Client application registrations are Microsoft Entra representations of applications that can authenticate and ask for API permissions on behalf of a user. Public clients are applications such as mobile applications and single page JavaScript applications that can't keep secrets confidential. The procedure is similar to registering a confidential client, but since public clients can't be trusted to hold an application secret, there's no need to add one.

This quickstart provides general information about how to register an application with the Microsoft identity platform.

Azure Portal의 앱 등록

1. In the Azure portal, on the left navigation panel, select Microsoft Entra ID.

2. In the Microsoft Entra ID blade, select App registrations:

   

3. 새 등록선택합니다.

Application registration overview

1. Give the application a display name.

2. Provide a reply URL. The reply URL is where authentication codes are returned to the client application. You can add more reply URLs and edit existing ones later.

   

To configure your desktop, mobile or single-page application as public application:

1. In the Azure portal, in App registrations, select your app, and then select Authentication.

2. Select Advanced settings>Default client type. For Treat application as a public client, select Yes.

3. For a single-page application, select Access tokens and ID tokens to enable implicit flow.

   • If your application signs in users, select ID tokens.
   • If your application also needs to call a protected web API, select Access tokens.

API 사용 권한

Azure API for FHIR에 대한 권한은 RBAC(역할 기반 액세스 제어)를 통해 관리됩니다. 자세한 내용은 Azure RBAC for FHIR 구성을 참조하세요.

Validate FHIR server authority

If the application you registered and your FHIR server are in the same Microsoft Entra tenant, you're good to proceed to the next steps.

If you configure your client application in a different Microsoft Entra tenant from your FHIR server, you need to update the Authority. In Azure API for FHIR, you do set the Authority under Settings>Authentication. Set your Authority to https://login.microsoftonline.com/\<TENANT-ID>.

다음 단계

In this article, you learned how to register a public client application in Microsoft Entra ID. Next, test access to your FHIR Server using REST Client.