[Team Kraken] App Registration Script [WIP]

Configurations

Name	Type	Description/Value

Name	Type	Description/Value
`name`	STRING	Required The display name for the app registration. Example `"name": "NCD Workload Management Service API DEV"`
`identifierUris`	[STRING]	The globally unique URI used to identify this web API. It is the prefix for scopes and in access tokens, it is the value of the audience claim. Also referred to as an identifier URI. Example`"identifierUris": [ "https://034gc.onmicrosoft.com/ncd-wms-dev", "api://CBDD9546-2A15-477B-A2BC-14A5702E6797" ]`
`owners`	[STRING]	Users that can view and edit the application registration. Example `"owners": [ "walter.hoban@tc.gc.ca", "ivan.neganov@tc.gc.ca" ]`
`requiresAssignedUsers`	BOOLEAN	Only users assigned to this application are allowed to access it. Functions only with the following application types: Federated Single Sign-on with SAML-based Authentication Application proxy applications that use the Azure Active Directory Pre-Authorization Applications build directly on the Azure AD application platform and use the OAuth 2.0 / OpenID Connect Authentication Example `"requiresAssignedUsers": false`
`logoutUrl`	STRING	Front-channel logout URL, used as a destination URL to where a user is redirected after logging out to clear the session data. Example `"logoutUrl": "https://vessel-eregistry-dev.tc.gc.ca/signout-oidc"`
`oAuth2PermissionsFile`	STRING	Example `"oAuth2PermissionsFile": "Permissions\\wms\\ncd-oauth2-permissions.json"`
`appRolesFile`	STRING
`replyUrls`	[STRING]
`requiredResourceAccessFile`	STRING
`certificateAndSecrets`	[OBJECT]
`oauth2AllowImplicitFlow`	BOOLEAN
`oauth2AllowIdTokenImplicitFlow`	BOOLEAN
`keyVaultEntries`	[OBJECT]

Permissions

Name	Type	Description/Value

Name	Type	Description/Value
`adminConsentDescription`	STRING	Required
`adminConsentDisplayName`	STRING	Required
`id`	GUID
`isEnabled`	BOOLEAN	Required
`type`	STRING	Required
`userConsentDescription`	STRING	Required
`userConsentDisplayName`	STRING	Required
`value`	STRING	Required

Resource Access

Name	Type	Description/Value

Name	Type	Description/Value
`appName`	STRING	Required
`type`	STRING	Required
`requiredPermissions`	ARRAY	Required

Roles

Name	Type	Description/Value

Name	Type	Description/Value
`allowedMemberTypes`	[STRING]	Required
`description`	STRING	Required
`displayName`	STRING	Required
`id`	GUID
`isEnabled`	BOOLEAN	Required
`value`	STRING	Required
`users`	[STRING]
`groups`	[STRING]