Application Registration created with "az ad sp create-for-rbac" defaults to global sign-in-audience
- Dominant language
- Python
- Stars
- 4.6k
- Forks
- 3.5k
- Avg merge
- 3d 2h
- Merged PRs (30d)
- 60
Description
> ### `az feedback` auto-generates most of the information requested below, as of CLI version 2.0.62
**Related command**
az ad sp create-for-rbac n {name} --scope {scope} --role {role}
**Describe the bug**
In the past, this command would create both the service principal and application registration, where the application registration would be a single-tenant app. However, the behaviour seems to have changed as new app registrations are multi-tenant by default, with no option to choose.
**To Reproduce**
az ad sp create-for-rbac -n {name} --scope {scope} --role {role}
**Expected behaviour**
The resultant application registration is single-tenant, or a new flag is added to allow the user to choose.
The documentation could also be updated to indicate that the az ad sp command created both a Service Principal and an Application Registration.
**Environment summary**
Azure CLI 2.46.0 installed on OSX via Homebrew
**Additional context**
Contributor guide
Assessment
This issue has not been assessed yet.