Partner Portal Application Identities
...
URL: https://entra.microsoft.com/
Tenant ID: 6073ce8b f90faace-73f3b48d-4df44a19-9b80a39c-5e40cdc6965f1dd7b37686e3
Four different App Registrations registrations are used:
...
1.
...
EG Zynergy Partners App
App Registration Name: Partner Portal EG Zynergy Partners App
Client ID: 84c38b43 39a142a0-12e43e9e-4c264c29-82928f22-8910d79aa532f17d0fa537d4
Allowed to Access:
- EGU.PartnerPortal.EG Zynergy Partners ApiService
- EGU.PartnerPortal.EG Zynergy Partners IntegrationApiService
- Partner Portal API
- Microsoft GraphScope:
User.ReadMicrosoft Graph
Purpose:
- User authentication via Microsoft Entra External ID (CIAM) - issues user tokens
- Swagger authentication for ApiService and IntegrationServiceAPI - issues user tokens
- Frontend Blazor WebAssembly application identity
Token Type: User tokens (delegated permissions)
...
2.
...
EG Zynergy Partners API
App Registration Name: Partner Portal EG Zynergy Partners API
Client ID: 93bc5b97 7412b4a0-73e59785-48aa41cb-a6b69b63-703b78284351a61955334f3d
Allowed to Access:
- EGU.PartnerPortal.ApiService (not needed??)
- EGU.PartnerPortal.EG Zynergy Partners IntegrationApiService
- Scope: api://bd5100eeef383bd8-af63146d-4880498d-8c60a77b-47d4207d60c1afe4d730b6fe/.defaultAccessIntegrationservice
- Microsoft Graph (could be removed??)Graph
Purpose:
- Shared service-to-service authentication identity
- Used by both ApiService and IntegrationServiceAPI for service calls
...
Client Secret: Required (stored as environment variables in Azure and git secrets for development)
...
3.
...
EG Zynergy Partners ApiService
App Registration Name: EGU.PartnerPortal.EG Zynergy Partners ApiService
Client ID: 4dad5d62 e85dc5b1-dc8cf01b-437845bd-8bd0b48d-ae736a4d73fe08f50ee2e160
Allowed to Access:
- EGU.PartnerPortal.EG Zynergy IntegrationApiService
- Microsoft Graph
Purpose:
- ApiService backend API identity
- Service-to-service authentication when ApiService calls IntegrationServiceAPI
- Validates incoming tokens from Partner Portal App, IntegrationServiceAPI, and Partner Portal API
- Backend operations for Graph API, such as inviting users, managing groups etc.
Token Type: Service tokens (application permissions)
Client Secret: Required (stored as environment variables in Azure and git secrets for development)
...
4.
...
EG Zynergy Partners IntegrationApiService
App Registration Name: EGU.PartnerPortal.IntegrationServiceAPIEG Zynergy Partners IntegrationApiService
Client ID: bd5100ee ef383bd8-af63146d-4880498d-8c60a77b-47d4207d60c1afe4d730b6fe
Allowed to Access:
- EG Zynergy Partners ApiService EGU.PartnerPortal.ApiService
- EG Zynergy Partners IntegrationApiService
- Scope:
- 4dad5d62
- dc8c
- 4378
- 8bd0
- ae736a4d73fe/.default
- Microsoft Graph
- User.Read
Purpose:
- IntegrationServiceAPI IntegrationApiService identity
- Service-to-service authentication when IntegrationServiceAPI IntegrationApiService calls ApiService
- Validates incoming tokens from Partner Portal App, ApiService, Partner Portal API, and WCF service static tokens
...
Additional Authentication: Also accepts static JWT tokens from WCF service (separate validation mechanism)
...
Summary Table
| App Registration | Client ID | Token Type | Purpose | ||
|---|---|---|---|---|---|
| EG Zynergy Partners API | 39a142a0-3e9e-4c29-8f22-f17d0fa537d4 | Partner Portal App | 84c38b43-12e4-4c26-8292-8910d79aa532 | User tokens | Frontend app & Swagger authentication |
| Partner Portal EG Zynergy Partners API | 93bc5b977412b4a0-73e59785-48aa41cb-a6b69b63-703b78284351a61955334f3d | Service tokens | Shared service-to-service identity | ||
| EG Zynergy Partners ApiService | 4dad5d62 e85dc5b1- dc8cf01b- 437845bd- 8bd0b48d- ae736a4d73fe08f50ee2e160 | Service tokens | ApiService backend identity | ||
| EG Zynergy Partners IntegrationApiService | ef383bd8-146d-498d-a77b-afe4d730b6fe | IntegrationServiceAPI | bd5100ee-af63-4880-8c60-47d4207d60c1 | Service tokens | IntegrationServiceAPI identity |
...