...
Application registrations are configured in Microsoft Entra ID within the same tenant as PartnerPortal, details details here: Azure Deployment Guide
Sensitive configuration values are stored in Azure App Service environment variables. No connection strings or secrets are stored in Git repositories.