Proposed Pull Request Change

📄 Document Links

View on GitHub View on Microsoft Learn

--- title: Register a resource app in Microsoft Entra ID - Azure API for FHIR description: Register a resource (or API) app in Microsoft Entra ID, so that client applications can request access to the resource when authenticating. services: healthcare-apis author: expekesheth ms.service: azure-health-data-services ms.subservice: fhir ms.topic: article ms.date: 12/05/2025 ms.author: kesheth ms.custom: devx-tr2ck-azurepowershell --- # Register a resource application in Microsoft Entra ID for Azure API for FHIR [!INCLUDE[retirement banner](../includes/healthcare-apis-azure-api-fhir-retirement.md)] In this article, you learn how to register a resource (or API) application in Microsoft Entra ID. A resource application is a Microsoft Entra representation of the FHIR® server API itself, and client applications can request access to the resource when authenticating. The resource application is also known as the *audience* in OAuth parlance. ## Azure API for FHIR If you're using the Azure API for FHIR, a resource application is automatically created when you deploy the service. As long as you're using the Azure API for FHIR in the same Microsoft Entra tenant as you're deploying your application, you can skip this how-to-guide and instead deploy your Azure API for FHIR to get started. If you're using a different Microsoft Entra tenant (not associated with your subscription), you can use PowerShell to import the Azure API for FHIR resource application into your tenant. ```azurepowershell-interactive New-AzADServicePrincipal -ApplicationId 4f6778d8-5aef-43dc-a1ff-b073724b9495 -Role Contributor ``` Or you can use Azure CLI. ```azurecli-interactive az ad sp create --id 4f6778d8-5aef-43dc-a1ff-b073724b9495 ``` ## FHIR Server for Azure If you're using the open source FHIR Server for Azure, follow the steps on the [GitHub repo](https://github.com/microsoft/fhir-server/blob/master/docs/Register-Resource-Application.md) to register a resource application. ## Next steps In this article, you learned how to register a resource application in Microsoft Entra ID. Next, register your confidential client application. >[!div class="nextstepaction"] >[Register Confidential Client Application](register-confidential-azure-ad-client-app.md) [!INCLUDE[FHIR trademark statement](../includes/healthcare-apis-fhir-trademark.md)]