Partner Portal Application Identities
...
URL: https://entra.microsoft.com/
Tenant ID:
...
f90faace-
...
b48d-
...
4a19-
...
a39c-1dd7b37686e3
Four different App registrations are used:
...
1.
...
EG Zynergy Partners App
App Registration Name:
...
EG Zynergy Partners App
Client ID:
...
39a142a0-
...
3e9e-
...
4c29-
...
8f22-
...
f17d0fa537d4
Allowed to Access:
...
- EG Zynergy Partners ApiService
- Scope:
...
...
...
...
...
...
...
- EG Zynergy Partners IntegrationApiService
- Scope:
...
...
...
...
...
...
- Microsoft Graph
...
Purpose:
- User authentication via Microsoft Entra External ID (CIAM) - issues user tokens
- Swagger authentication for ApiService and IntegrationServiceAPI - issues user tokens
- Frontend Blazor WebAssembly application identity
Token Type: User tokens (delegated permissions)
...
2.
...
EG Zynergy Partners API
App Registration Name:
...
EG Zynergy Partners API
Client ID:
...
7412b4a0-
...
9785-
...
41cb-
...
9b63-
...
a61955334f3d
Allowed to Access:
- EGU.PartnerPortal.ApiService (not needed??)
...
- EG Zynergy Partners IntegrationApiService
- Scope: api://
...
...
...
...
...
- Microsoft Graph
Purpose:
- Shared service-to-service authentication identity
- Used by both ApiService and IntegrationServiceAPI for service calls
...
Token Type: Service tokens (application permissions)
Client Secret: Required (stored as environment variables in Azure and git secrets for development)
...
3.
...
EG Zynergy Partners ApiService
App Registration Name:
...
EG Zynergy Partners ApiService
Client ID:
...
e85dc5b1-
...
f01b-
...
45bd-
...
b48d-
...
08f50ee2e160
Allowed to Access:
...
- EG Zynergy IntegrationApiService
- Scope:
...
...
...
...
...
...
- Microsoft Graph
Purpose:
- ApiService backend API identity
- Service-to-service authentication when ApiService calls IntegrationServiceAPI
- Validates incoming tokens from Partner Portal App, IntegrationServiceAPI, and Partner Portal API
- Backend operations for Graph API, such as inviting users, managing groups etc.
Token Type: Service tokens (application permissions)
Client Secret: Required (stored as environment variables in Azure and git secrets for development)
...
4.
...
EG Zynergy Partners IntegrationApiService
App Registration Name:
...
EG Zynergy Partners IntegrationApiService
Client ID:
...
ef383bd8-
...
146d-
...
498d-
...
a77b-
...
afe4d730b6fe
Allowed to Access:
...
...
- EG Zynergy Partners ApiService
- EG Zynergy Partners IntegrationApiService
- Scope:
...
...
...
...
...
...
- Microsoft Graph
- User.Read
Purpose:
...
- IntegrationApiService identity
- Service-to-service authentication when
...
- IntegrationApiService calls ApiService
- Validates incoming tokens from Partner Portal App, ApiService, Partner Portal API, and WCF service static tokens
Token Type: Service tokens (application permissions)
Client Secret: Required (stored as environment variables in Azure and git secrets for development)
Additional Authentication: Also accepts static JWT tokens from WCF service (separate validation mechanism)
...
Summary Table
| App Registration | Client ID | Token Type | Purpose |
|---|
| EG Zynergy Partners API | 39a142a0-3e9e-4c29-8f22-f17d0fa537d4 | User tokens | Frontend app & Swagger authentication |
| EG Zynergy Partners API |
| 7412b4a0- |
| 9785- |
| 41cb- |
| 9b63- |
| a61955334f3d | Service tokens | Shared service-to-service identity |
| EG Zynergy Partners ApiService |
e85dc5b1- |
f01b- |
45bd- |
b48d- |
08f50ee2e160 | Service tokens | ApiService backend identity |
| EG Zynergy Partners IntegrationApiService | ef383bd8-146d-498d-a77b-afe4d730b6fe | Service tokens | IntegrationServiceAPI identity |