When creating an application registration you establish a trust relationship between the Microsoft's identity platform [[Microsoft Entra ID]] and your custom application, meaning you trust Microsoft, but Microsoft does not trust your application in the same way. When registering an App Registration, two types of objects are created within your home tenant: - [[Application Object]] - [[Service Principal]] When you register an app, you can choose whether it is registered within multiple a single [[Tenant]]. When you've completed the app registration, you have a globally unique instance of the app (the [[Application Object]]) that lives within your home tenant or directory. > [!note] Note > If you register/create an application using the [[Microsoft Graph API]]s, creating the service principal object is a separate step.