You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/api-center/includes/api-center-portal-app-registration.md
+11-8Lines changed: 11 additions & 8 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -6,31 +6,34 @@ services: api-center
6
6
7
7
ms.service: azure-api-center
8
8
ms.topic: include
9
-
ms.date: 08/08/2025
9
+
ms.date: 02/25/2026
10
10
11
11
ms.custom: Include file
12
12
---
13
13
14
-
First configure an app registration in your Microsoft Entra ID tenant. The app registration enables the API Center portal to access data from your API center on behalf of a signed-in user.
14
+
To configure Microsoft Entra ID as an identity provider, first configure an app registration in your Microsoft Entra ID tenant. The app registration enables the API Center portal to access data from your API center on behalf of a signed-in user.
15
15
16
16
API Center can set up the app registration automatically, or you can create the app registration manually.
17
17
18
-
#### Set up the app registration automatically
18
+
#### Set up the app registration automatically (recommended)
19
19
20
20
To set up the app registration automatically, follow these steps:
21
21
22
-
1. In the [Azure portal](https://portal.azure.com), navigate to your API center.
23
-
1. In the left-hand menu, select **API Center portal** > **Settings**.
24
-
1. On the **Identity provider** tab, select **Start set up**.
25
-
1. On the **Quick setup** tab, select **Save + publish**.
22
+
1. In the [Azure portal](https://portal.azure.com), go to your API center.
23
+
1. In the sidebar menu, select **API Center portal** > **Settings**.
24
+
1. On the **Access** tab, select **Configure Entra ID**.
25
+
:::image type="content" source="../media/set-up-api-center-portal/configure-access-entra-id.png" alt-text="Screenshot showing configuration of Entra ID in the portal.":::
26
+
27
+
1. On the **Set up user sign-in with Microsoft Entra ID** page, select **Configure**.
28
+
1. On the **Access** tab, select **Save + publish**.
26
29
27
30
If you need to access the app registration later, you can find it in the portal under **App registrations**. The application is named with the following format: **\<api-center-name>-apic-aad**.
28
31
29
32
#### Set up the app registration manually
30
33
31
34
If you want to create the app registration manually, follow these steps:
32
35
33
-
1. In the [Azure portal](https://portal.azure.com), navigate to **Microsoft Entra ID** > **Manage** > **App registrations**.
36
+
1. In the [Azure portal](https://portal.azure.com), go to **Microsoft Entra ID** > **Manage** > **App registrations**.
34
37
1. Select **+ New registration**.
35
38
1. On the **Register an application** page, set the values as follows:
Copy file name to clipboardExpand all lines: articles/api-center/includes/api-center-portal-user-sign-in.md
+8-7Lines changed: 8 additions & 7 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -6,20 +6,21 @@ services: api-center
6
6
7
7
ms.service: azure-api-center
8
8
ms.topic: include
9
-
ms.date: 08/05/2025
9
+
ms.date: 02/25/2026
10
10
11
11
ms.custom: Include file
12
12
---
13
13
14
-
To enable sign-in to the API Center portal to access APIs, assign the **Azure API Center Data Reader** role to users or groups in your organization, scoped to your API center.
14
+
When Microsoft Entra ID is configured for portal access, users must signin to the API Center portal to access APIs. To enable sign-in, assign the **Azure API Center Data Reader** role to users or groups in your organization, scoped to your API center.
15
15
16
-
> [!IMPORTANT]
17
-
> By default, you and other administrators of the API center must sign-in to access APIs in the API Center portal. Be sure to assign the **Azure API Center Data Reader** role to yourself and other administrators.
16
+
> [!NOTE]
17
+
> * When the Microsoft Entra ID app registration is set up automatically, the user who configures the portal is automatically assigned the **Azure API Center Data Reader** role.
18
+
> * Be sure to assign the **Azure API Center Data Reader** role to other administrators of the API center.
18
19
19
20
For detailed prerequisites and steps to assign a role to users and groups, see [Assign Azure roles using the Azure portal](/azure/role-based-access-control/role-assignments-portal). Brief steps follow:
20
21
21
-
1. In the [Azure portal](https://portal.azure.com), navigate to your API center.
22
-
1. In the left menu, select **Access control (IAM)** > **+ Add role assignment**.
22
+
1. In the [Azure portal](https://portal.azure.com), go to your API center.
23
+
1. In the sidebar menu, select **Access control (IAM)** > **+ Add role assignment**.
23
24
1. In the **Add role assignment** pane, set the values as follows:
24
25
1. On the **Role** page, search for and select **Azure API Center Data Reader**. Select **Next**.
25
26
1. On the **Members** page, In **Assign access to**, select **User, group, or service principal** > **+ Select members**.
@@ -29,7 +30,7 @@ For detailed prerequisites and steps to assign a role to users and groups, see [
29
30
> [!NOTE]
30
31
> To streamline access configuration for new users, we recommend that you assign the role to a Microsoft Entra group and configure a dynamic group membership rule. To learn more, see [Create or update a dynamic group in Microsoft Entra ID](/entra/identity/users/groups-create-rule).
31
32
32
-
After you configure access to the portal, configured users can sign in to the portal and view the APIs in your API center.
33
+
After you configure access to the portal, users can sign in to the portal and view the APIs in your API center.
33
34
34
35
> [!NOTE]
35
36
> The first user to sign in to the portal is prompted to consent to the permissions requested by the API Center portal app registration. Thereafter, other configured users aren't prompted to consent.
0 commit comments