How to: Register and Manage Multiple Entra ID Applications

Instead of registering each Microsoft Entra ID application by hand in the Azure portal (see How to: Set Up an Entra ID App), you can register, import, and manage several Entra ID applications directly from LS Central. Having several applications available lets you spread web service and replication traffic across them, so you are less likely to hit Business Central operational limits. LS Central also shows how many days are left before each application's client secret expires, so you can renew a secret before it locks you out.

To set up the Entra Setup page

Before you can register or manage Entra ID applications from LS Central, you must fill in the Entra Setup page once. This page stores the credentials of an Entra ID application that already has permission to manage app registrations in your tenant, and is used to call Microsoft Graph on your behalf.

click the icon, and enter Entra Setup, and select the relevant link.
In the App Registration in Entra ID section, fill in the Tenant Id, Application Id, and Client Secret of the Entra ID application that is allowed to register new applications and client secrets in your tenant.
In the Client Secret Setup section, review the Secret Expiration In Days field. This is the number of days added to the expiration date whenever LS Central creates a new client secret. The default is 90 days, and the maximum is 730 days (two years).
Select the Create new auth token action to confirm the credentials work. LS Central requests and stores an authentication token that is reused for later calls until it expires.

Note: If the Entra Setup page has not been filled in yet, any action that needs to call Microsoft Graph shows an error with a link to open this page.

To register new Entra ID applications from LS Central

click the icon, and enter Microsoft Entra Applications, and select the relevant link.
In the Manage Entra Applications action group, select Register new applications in Entra ID.
On the Entra Application List page, enter one or more display names, one per line, for the applications you want to create.
Select the Create Entra Applications action.

For each display name, LS Central registers a new application in Entra ID, creates a client secret and a redirect URI, grants the permissions needed to call Business Central APIs, automation APIs, and the admin center, and tries to create a service principal for the application. The new applications, together with their client ID, secret, and secret expiration date, appear on the Microsoft Entra Applications list.

To import Entra ID applications from an Excel file

If you already have Entra ID applications and client secrets - for example, created with a script outside LS Central - you can import them from an Excel file instead of entering them one by one.

On the Microsoft Entra Applications list, in the Manage Entra Applications action group, select Import Applications from Excel file.
Browse to and select the Excel file, then confirm the import.

The file must have one row per application, starting on row 2 (row 1 is treated as a header row), with the following columns:

Column	Content
1	Display name
2	Client ID (the application's GUID)
3	Client secret value
4	Secret ID
5	Secret expiration date

Note: If the Client ID in a row already exists on the Microsoft Entra Applications list, the import updates the secret value, secret ID, and expiration date for that application, but does not change its display name. If the Client ID does not exist yet, a new application record is created with all the imported values.

To manage client secrets and check expiry

The Microsoft Entra Applications list shows an Expiration date and a Days before expired column for each application's current client secret, so you can see at a glance which secrets need to be renewed soon. The Microsoft Entra Applications card shows the same information, together with the secret value and secret ID, in the Client Secrets section.

Select one or more applications on the list (or open a single application's card), then in the Manage Client Secrets action group, select one of the following actions:

Action	Description
Create new Secret	Creates a new client secret value in Entra ID for the selected application(s) and saves it locally.
Sync Expiration Date	Reads the current secret expiration date from Entra ID and updates it on the selected application(s) locally.

Note: Both actions ask you to confirm before they run, because they call Microsoft Graph for every selected application.

To create a service principal

Select one or more applications that already have a client secret, then in the Register Entra Apps action group, select Create a Service Principal. LS Central creates a service principal in Entra ID for each selected application that does not already have one.

To remove an Entra ID application

Select one or more applications that already have a client secret, then in the Register Entra Apps action group, select Remove Entra application, and confirm. LS Central disables and removes the application in Entra ID and deletes the local record.

Note: Before you remove an Entra ID application, make sure no POS terminal is still assigned to it. See How to: Assign Entra ID Applications to POS Terminals.