+- Once selected, it will open a new window. Enter the name of the new application under Name section and click Register.
+
+- This will open a new screen with the application information. Please note the ApplicationId here. This maps to the federatedApplicationId as one of the input parameters.
+
+- Once this is done, go to Manage -> Certificates & secrets section. Here select Client secrets option and select `+ New client secret`. Note the client secret as this is shown only once and we would need this value later to map to federatedApplicationClientSecret.
+
+- Now we need to set the application url to allow for this to be accessible.
+ - Go to Expose an API section.
+ - Click Add next to the Application ID URL.
+ - This will open a side panel with the Application ID URL populated. Click Save if this looks good.
+
+- Now we can go to Manifest and under Microsoft Graph App Manifest (New), update requestedAccessTokenVersion to 2.
+
+
+This completes the Entra Side setup for the application. Below section covers how this information can be used to setup on the ISV end.
+
+### Setup on ISV
+
+> **What this section sets up:** the **Workload Identity Federation trust** on the ISV side. This is where the ISV is configured to trust JWT assertions issued by the internal auth app created above — no shared secret is exchanged with the ISV. The ISV validates incoming tokens by fetching Entra ID's public keys from the JWKS URI and checking the `iss`, `sub`, and `aud` claims against the values configured here.
+
+Every ISV has their own setup, and the exact UI and field names differ from vendor to vendor. The table below lists the values most ISVs require and shows where to find each one on the Entra side. The configuration steps on the ISV portal itself are owned by the ISV — refer to their documentation for the precise navigation.
+
+
+
+Note : The list below is not comprehensive but covers the parameters most commonly requested by ISVs. Documentation for ISV-side configuration is not maintained here as it varies per vendor.
+
+| Attribute on ISV | Attribute on Entra side | Location on Entra |
+| --- | --- | --- |
+| Token Issuer (`iss` claim) | `https://login.microsoftonline.com/Z_r4o`!+wW*UQ_JRw0?@;Py<& z;ATXcShSJHt0N!Di?YW48m7X{SW4N}Z%GmKbE^LjNx5ypR(yt9^KYu3SmEiL`j@?7 z&Zog=rlJkuJ#M43Hfj6Eu$4bno}cce9X|cAI5pwUUiK!(y~#Qv=m25m*BOm5I!vF8 zt%JI))|c#`j|u3!CPcD{;Km~gySc3;+rwxfQ&LYh9=XA?bfFa zPyZEGIMFyNRjoe`(o}Ftr; ZFMxHN5ejQ&!GofW5 za!+<$aJzgo%`~2j#+1=3Lm(L&TY!|QvJxwb1V`u$QI{;o;m^jFUH5IO{xBgY!?WgR zea4K@MxKbm+HZSP#qwqndY{IY_E2v9IoFJDav8}=reh1%%v6U)-$5x|H; d({vmm&*X0kB-Wbnv9XTSc0t@Ix_))Ie7T02?8|Y!@kEd~2fshnCOt%42;R8c zDd|LhGBw!7=1D7)mp#dAXwPnvcPhJ4r6b&E=4OVXUePzeU+q$_N`bF-*67d2Z1 P=27fq?#!l^4zJ- z>&QxAmmFY;)`8|2_p(ZWQ7!au)v (H-vgxsupJyzZ2{lA=@ ze-HzizkNRCBjXEMHvPa*VIM~Ve0Vl!QMuVefa{m%s)mLJ#+74t$CI=4_OcI$AsW>b zi?t{rkYv=8%x)Jlvw5#+7Ky#H-{ZTT2Hg`fG}6vz?K#-lD>yimTIVA;Le-c;2+Y51 z7<-9lk@oed-Q0}JwQa-`keP>WxYuzF`CXQ+jZ^p s0w_jF@xTM>u<}#@|xD1XbBDET~!^<<)F{L2qLQEb1H1{ zySaXw?p)B+tXMuk)@s6yK{km|_DQYV
7$uzj{+|Q9ZIHm$58HTquCnl{qD=8B14vji^QP#q~iXn zvmM8o*{?n=W!jX %;P#r&J1D(O}#(E}bm z%lTP{g~7rA$dJ7HIUXMG%OR5u9s#Mm{K)^v500-+hZ2m;%nk{Q)0P|dKaJKEB%HW) z9=HukbQ|I`BvN}HUrrW^KJ4d(TI5|FSk*1hQ25+`>gT*8t=t?4 f>T^574Rk;(zEa;eYZD=Krbx z7WK#7cg@gz8#0m<`1|rx+v!Hb+qV0Fm&<#SOZ0#7Zi=Kkp9&f_l(gCpvKyqVUc8YM zJa_*?ilO+poATG(`;yc5L?NA*KJ^P}afbZV)U4LoUz4K2ayovL*Nl= D6Dt-M{&Q^elUK50HZ= z*3oAnx8>!qNYCe&9 wAB_@%XYY=wE{K$V}N~YM^_$CTI)(LDa@NM!KpLuTZcWTg67j{Q9Q1;|o z9X6N%ARZgX&y2@_tgJ3Rt5(>dU#p-?6!3hq0ai7U5cQkuKqv(#eX>$z7XL?ew{SyO zx5bOP%7xW^V}Pi>75d%u%Aru)t0TFQ_+7E__OQ=no%hKKf42_ar ;tz-wgnk5ygK zPl)Kdn-`Pups-)FnXXDB zUN>W`pvVtJL0d>eu~P>^uDi*8+c?}fmmXS@pB!c>eTq18E+%nA50XVElSK}SM9f?h zxsLB1+SSb eymz{O7V_zw2$Hhj3x)( zi&*K^VX7nCU|^eCOaGeJw+#(~y3BO|9x?e@9{I+YGWDC-BZ4BTg(kwYLLOpsOeki} z>_er!{>RT;-Slxns7?n@6+VA~lHX1@QrFC?iVh%Uo4vuJ^sS`cXSx(u@o({0E jXGkBj$cQ^e00eR#(D!={ndk%8O4B1W?BwQIK8GBgj_X?T7|o( zhwWn)LuvP&gRzz1y2?s)^D)t67tor@fM3IJ8>tJoPc6=qcAOW*Ub0)f7WU41mQ-@x zl)PAlX%q~RUtu$qI!(X1paKCuoG4$~Vw+zW kOW}<+r8d;JbAhgd J!$NXvcV-S~th;17 zQX(On?0oaAPd!mnXL|EuZN#Kst#8z(fy>tKV&g@6{Q|II(XDc3UjwIu>vyBoe^G%x zn~N+L6`%*ugfMadm=>wpwzK}g@86E@koS7dtkg3K;PTw$bj12J&}g1KRlU%W{H>0r zt =?xSu`HtOEc)HM?nflD61wE{%SM<$*w8qp!!L!WxIjqQm!N=WODj%P) zTZ C!`4JAsqq3ST(G=j<)gzC608q{ZlJnwWIS1m;roi ztYDdq^;yJwtvOEkokYKp(k;t~Y3( DB^fe-j3pb(ZT6H0> zN3MwOM}Wpn^Qb4Z#r%|xPJW|chWIrwp_%v)cdNy}r71mwrLl%Q_K?yFp;2O`tj72L zeNt+C?4bNqgyOuGiG+6_9(77^^k397(bs!$waX}`bJ6mYu7_;wlw)46q1S|nJhGY24vBZ h3ZKX9#&?I kzaf$BUYP+P2Fsa8(ULOL8cPfIoD## z3&)oo7p5|64Guv^O%W}x9mj*doHxN~Um(yXDn4I;D_(y2W _iPPHgfI0Hx z*|eAfEK#hSBuuCv{>7_|)OaBZ>aW)4p2lBD#H}r$3knz+{
T(+!Ie{NiP z6w`(F2MV%dPCpU;rXn8Ft!kUbI{h;r&B4el7!MnGPvF#0L8>q=oH6E43z8S#6&M>6 zOxT>EGxA~4_#v5&c3Qmwr(aHw0H2TF?57gJunVI;yq%s~DYOuGJ6ppJbfWcWO9>*P zrE*j3{A46|(Ydz+#Y%5YCSaWPy5Q&e56Q5jItcdLGH%1^=E}Jm2Rv`|t$cbE^-B}{ z3n_Wj8`(ZSrw%FLzTVS#n~lIA87;Rv#C |&U=|YN{e&I%D63k3+f kse5gpH z`w9?~dUQT(b0iTZBbOIt=A<5x2q&97uRnP4=`CnFNao#54m>Cd+)WnQO_s8J8HRPf z3?J_giqChW6c?Y_vi3($K_RX;`7M&4>w{kdvx)}D^`C!BR*BuW(fwE*wLdJsSKVC; zDjf3p94Ez?n<@sXGILT1Km*?aR<*JowLJ}TZg rE;RQtKPtRpAXdkGZ-tGjc4ANT>CN@uxP3HFYbth5L9{u#HCN>K?NRv4$Gl zNEJTjyj}-2x4=0yYap-$t8Libng55hq &K#FI`b%=O%V<5kX!!# z;nWuMb6H-P+mR8Vc z*#BW2x z2dk&~DNX?DEec~9V~SFXJV428>yA4bqU8au=Cm2iL=!)5p65b}M%F?>S|Sf)O(h3K zvWz4ZV@~d>N1c%Y&hYYqQy0V`1_jE8+z}|6oGxN!WSz3Y^}9M9A#|EaZ26 H}u7Ou{=Tkjmc&yg1Y{{&YI=<+us5rZ_v9ikj`_X+x1>#;j!1dH|u{*)0 zH*_D_;ti~UcY-&l>-(I0CFuSuZ<<5A^S}y|r=i7avVJ_aHJg@hFbew)rVoZa%NG^j zqPDJ@YP@)N$jrWfyQNcjcmvMNJ&7Fu!Knou#Km&x^mmm!qavU(g2UJs>%8ye?j3 zPf$CBr}6&0NWz~)66|$qcu$E;mCY=_exuBP#l=saYE>QtyjvDq`A8Fd40D2M4*g!< z`3rSWO+6~Yy4YIY67kp?__jqiR~y?+yB5sKCPy>q#) f6e?@4z zFs_@ZWJ1jSs-xSpZkh%;H(yI}Om_UOTuwS)E$0AcJtUuRLU_{4?`%Z`gHv;H@uR8Z z7R@91yck}(3%;Tt&vUJDiHK6lE%myYd %KFUj6xPXQeJ 6f$m+k8ZTONSU3>;?p#(jFS`5T+oWPN50$L^H*bLg-J(Fg&fu_>#(A}s zYsQnPMFp`?3^M2Dn(8&?hFfeSJe#xx9R8-AA7p+MV3ZYe+=%vbA1*8ejrqjE>!M3z z-AYediSN?PfYWI=jS0WT%cIj>R`S)h4%dmBC5B8RI&K;mYeZvwbr}oR&R9T t5 zW!93_>o2}FC+PESiQL!>Km(0Y?cZSK+mjIKTJ)#)-nBEoCop}8QSqN-uZB3}i}Ahw z&TYOJlrb`w=>pPqspsh#^unq_7-e>B-^%I7YptKU!MkaQsfVxF@xH$<@6ph7P^{&= zx>C$^G}TtFBXbsfbS#+aBYYigY~ebq5w>N`l=|8kPC*$`FT0^iX!};t)e113Fc`Z- z)`ldqS??F^_p{H-&?r`PVF!~9r!cjBFdU)gIG>CbjpQZQ;IAqdfDvP?IcWd*LRIl- zi^W)u4tAG}`fU^;jIV#~phy}PkcR+s*m@OY=cCuNrs_?iC!_kYyZJ}yfy2+~Uh@PD zn$W|$XAvhqMybA? rfc@b7;t~@s9r1aXhifW8i3C}>rwyp6E|`S zs-g}>vcq *Te8SrGC53O7c)t=x;No89hprhXE*KpJtkuA9(~9v8 zrkiZVSHkd-5L-^|aj 1Wv(@8r%AlBDG?U@sYVK#YWDJQQ)iqB z=;AwiLVyL@P>MRvMQNz7x?ylKgAm;DXL>}VKv@Bb?1|E=BRc09L6ytr^W!D5mNto` zIL-#^qnY@=f_sRChw?m~pXS|LV{fbMTR9QzA6D|y0_qcr*gYil&GbyA2@Iu?#ZB(2 z_jQKws*KRzfvbNj{XE%FyVu3z@psBOkz(mx1Gg1uncd;Ov>6z*rPYsw#=a%!ANjh9 z9DQmkvcXKG6DOm}zAlT{N%k8)b~Rcp 9p8m1wEoicoH3 zf4yP5b!Wn>UK`T&IXuRX)0=Taiww9v!VL6eoW$%h cOHkc VI0vzoDC+LwR^3!C7b|tSgt%s$ApDz zIkMJm%JZj0fnxiEO%sVb3Txm1@^7?}CobUSQ{E#R6|$zA9~y3RuI|2^nVpFZ7!~a9 zlstk)&bCGbJBwob{cdE<-6np7Ef8BQ!X*ujvq?F4@+C`2ll$w|&&} 83=f0czJ7R9=okiqY!()N202r{*99*;ITL&Uj=(J;J$8ANlue8BYrX!<_XD)7ziZAJokhod$O zK+U!D1|pMWC+ipYRbFo!$j-?FEf113b#c`|F%osc>cRmY>DS-8h&(Z|nk6!=S+>gM zfU=|6b=u;AD)kThuILVtR3%z9?6)c^oT)M8PZ$v4d2C2L0eP)TjWJX=pF!R9L2>-R zp!(-0{jD0#d5Z+3%XrLU?WiFx*L)%uC!<0)^Ndjx0@dlCE`pYD!$i`YIo|E@w}%cU zZ5H58xbkQ3H0Fg%aB>nFIhZ(U?yxaws=gbA$A`kKtH0Y)Ge`s6_%OaaGZyE{^KE-t z+(pqS>xzDLeK|vk=(i26fVTi?JD^rCmPgu-Yk;<%EW-eNL9H<9u@#b0YjWxXfV$(^ zAj}dvt`&|wSLkYR8tOZKz%kGLAEN9QB1ejs@(F9A@&TptR3Ge3@F-*p6{E(E$mmxT z3LcL{(kvLiZ%wtJO9_2Jdf0#`28}NsV}_;_#uOiq`nlq#1>W;xhWv_KHh(fF}t> zYK{f(RbECcW6@*LensRQ0u!nqyK;Hoecj6%{RD4o7V_;LN6PYS(X+M>T+vYNZFyA+ z%(kcK&)^6OU|a1p0qKh+fL8YfYzG!eGXfq}Vp(@9)&>|V6LK9#OV3uTh!o|pjR>Gc z)Bb&YMnK>Rl0v% l%}lZjv xNRIb7+)g7k8PP_ILdBT4%(`vM?>$s{i%ofH I^p*(}CdM#Zm4MtkvK#blf7;^31xQsK$fbhnO$1!$tnb#vPeh^`3@Ju)b4cBe)M zM~JkPR;Lq3QLV-xKg*njcz+_e-uYSD&k$^}$xM|HBFPGn=l8np0twFeV>P{+!{r_u z8ZAg8&F-wR2->$3;dfvdMiBQ;jXJImBMbsgtjrv$O%gg2yYe1m8|WFZG$PH~6>~M@ zJGcyM?aJ~uoGgT{S&1B{?FBF2PbYU{gVCzg^`PW$Or^k_0(`OV7c0yyIGr5xOt|F+ zw L(F`~_Z|4q6m zo8VdGrkM`X`JaNKqxaG9#~kF~T@*xpXP?Qgq7aSt&!$t5x3NUFzzL|vgji{}lM`AS zTd!2c5mbeb2^?NoAizV`r3L6}20e2*WR;S56O;y?A_TMa3{f`6ebx8hJ6X}{LwrJ# z;e2BDTNJJ&q4sYqWaD|3$qKS^$uvBF^r^HAT0fF8CGt9rjINnL*Vi1+MWaqC?L>}$ zjhe47M5-&hyhvIFoje73K00WhVl~xhNZ$L0PEtnx92pNV9K;Knl;o5DpfvDZfr9aB z23L`#Gqgw83DT|PAdABA;v`23E1xCJtY?d<11?j1nm}JfSf>8{z$Wp-U?8EDGYX^* zFG~@9&9&6Dhyr$Kapz+vy!^O2tKnWG@JAixF$z-8PN9lwENfD3^2YL4{d6rl@41%M zm(xlh!*|+@@jCg~PokC`4>_HjI W4Sog9a6DY3F#d2$ES>Fs6x`&h=KwIa4}MPS|+Bf+olJ73XTLBH=O zU2c%DVt+2M_<9~@qi_E;wCyP#E*`!3O8@r@K*j8It)kmuB~9ENfA`e>W`Q*rg=&$0 zP#gCSwZ-r9&m _9X3tiBjUpI7tNo^ybjQ;d? z%g@n*U^(&4S1vQFmmw86WXHjlZ4s86%XkjjH{XPgUC0E*M2& F}cE-uOBI|s=_YHN~U%no;Xut3*iA7q9lPL9U2h1?79a8-5XyjEj)bg_5 z%CtzuCx3m*XnUt+YGTn^=7QlYW4Dm58*#R6Og@&Pe;qX&K&*t`il`T-U*yFk?*{MH zepjiMuoRBU<8eU2;JKCZkis~P-o7t%7ePBZ>9yIbZBR>M;8sgb-&@mQA_mag@o`t# zeTj8Ac-T|Z4{|*cYQEK1IXvn??I%d#NzX-hv2c%A25s(EG~78Stj&p+cowzYGW}|b z6kD-C@bnBOEc10(E;IRlZr||r(MLN*-X!)|xP-6;w6ooM$6%`r#UfX#{M>f3C~V5X z^(;S?D1-V!rwmur#FDa)1bo0YhK*yKO*i5wtElfyUdd;IP1IsV=&lFSEyay|OATSH z)H-r6%)bCcP(mY$16Jl-{sZ2U&!-rryCaiNHSTfHI@+swjfVDo{{CX%!vGeMj)tl! zfZ5n;p1)Z?MzF0P(sj9JFG@wh%~{ixSfiNubJ77gqQ)OOgNc_vK5p37vqnJqNLsCF zG9j=5GyU 1``zrPOhJnE{o+`e{=y4QY{p&@j(^d9q^$` z^be+NvZn3Yiq1QuLct{pzee%vQ1SN>gxQ{Iyyw+a&1@8Oqev5{t>C8VgzeX_Oujl` z8gTLBK70&dL)I1XR6Mt#z3IwLqMm04MN`Qxv$dQ<*v~mq>qx*RriD=U=FhFcn&e7r zeU}CfazYcH%R^(*Ya}Q8Q3oc$LQdwsJ-sM9!b&I3dqsB?i%fnX#{O09lZ$oPkNBU# zM&4DhQcF+jYUrB4#d;UC1aIB2yG|DycZ8ePJ03{cd@gcs1hQpxtlyzh^R%vyvMYM# zL0c?I*9iA!Igig9bE#*xDdB3Wl|!5zGCT!5io~Oxk$@r!1|g}QjErxD<@K{7TJ6`0 zCdLE ?HK@VK2hbW%=%p$T$uF;{d-VjniuCXdvmM ~e130Je@uuysTbSrI+ZbV@v>dlmv};LVP2a|d z^!d8 +zukE!x43VN2azPA(~t?=iqi2YCzw;d^;BI{@{2%S~}TAqof?!Sd0e!#ov z%2xqw!SXd@ZasVn6r^nNoz`(E-om~ewP*~ggcqt0>o?~hr?N4@U_w_sv%APBbBO$! zdBX^}sxj8`{HDoS>ZdT=UYDH;Hg8dBM2MZKWg#e-j6)E~e}BgG?pR!^8xKN*rJ^{j zwudJBmVyyq=9b)%341-VPClKfw{lT6dKHh#R`I+oHtGQVE-BHGc7=L|Y?eGI)^JFa z1Stkn?}~|e+3+x?&Vs*v@Vyh8@V&AU#MXU#_crOy3%IRttJP8$Jm_-qUBzXbKQxB; zhCHz{1?Q+8i+r4g?q}JIb=&ZUr(N+ z1O7&< aEnk}s~EGW`F z4?;UiguldXjG?9{<(-eZ(!`=!yXc4e4b2x (~(kCIp-q;n=UOaY%a{@s-|4 z4$^S#|DK7X!p?K{`VT27i3ddek{23fz89siM5w}Y{I89CJ99l&dC$+3YsH-dI4h~v zHh@dFgA1%(@$NAE^V44(Ax+zzldo5fikPu&zT2R%jd!ST>nHt?}%(pZs+vlos{>8nNQmtl!2w8frFM5?K^Uw;`GMW z#KBl^v@A8KzbnTW8M#ib;iJuF>Za+nQ>d1&x~Z_lpJuVve9|Ora#1HpS5R=As{YE+ zgY^Rdk>cvnuxK%X7>I$AY@0MlHPVyUx@yvdxb4>m1PdwMLZ|HSoV6{Sgk3}jg}6)h zEc@lLFBn&5&Gkzan-cdK%v@KdTlDtHUl84GOQXRY)SvdBJ{t6g-KI4j-$;UUx`o9z z-S*v$Iq+N8;T3#U)`1cu+J9=;J}3^Hl{e!;6f7kScY=atQE77b6a#aX`eZZqW6{UO z7m!(G+!l(a-^CA06w)DdGF69UMvnG|GEVxTMfNZZic;!;N#Bf7JW(YcSPGd#{-~Ju zD0acsNLTw|cx7X7KD?t9OndvBtD+6be1)z6!;-5&z~o|9;=*k6&Qih3Jke10{P_&` z_Z!}r=%OU_ER_5r+ea#v;3Lkt;Igaqq-2kfNCS4HCch@*z6_olprdd$gRvtUGUv`s zWgQl3seo~PrJk bVL(T*0Y_oj}%%4o|ST6%6GsuSmz7bGI+mva_ea64>ces4=AG z4xHA{@i3zCK@a^x_uTZ|EKZoIks5f(g%OqhhQk1vp4($Xa6{b+-&}~xmf-&)?JO9Y zVBaoIcSv`4cZYO$cQ+f&C{aqfyOqujHaZ`=yS7n+ARQv5p#ERK!}}%f`?{`k&hH4Y z$T-OHF{kGxc)4QtC@cNlB4#{HOp=AoEbc1QUFKXXu0w+!)TfR2ES&a4Qm)0UKCNO> zP{esc%zMe=nDcxa+V8f6o%=YGq1dJ(9ug1j>=Ws>;A~E4?lL{WUEc@eC x_He;bY52&c7gc3mQz_>T};rX%RbDoLu8BIO{%BtEAm5O#a} zk)UM1GxK7SGpU9{1yr!5hT!F=_tuL+Eo=+|O9#59Mh0zl>H8)vC%24b$8OWE_n>`_ zXVXJwP*KyAA)vuRV(~sy_>OY!a;$z5K0Ax&9lY#mVUeef4d_mrmTE8klsDeyWhA1f zzUn)hCXt*#yCGwfY8Ziut)c%%-GX0vauVICa4WI4Z`-{I|0WJc?&O$^cvTzF8X~no zV{z_Q_Bah_pm=zb@-b{Dpud^kNk_MB97f?K