You have an Azure subscription that is linked to a Microsoft Entra tenant.

The additional Microsoft Entra object is a service principal. Microsoft Entra distinguishes between an application object, which represents the application ' s global definition in its home tenant, and a service principal, which represents the application ' s local identity or instance within a specific tenant.

Microsoft documents that when an application is registered through the Microsoft Entra administrative experience, both an application object and a corresponding service principal object are created in the home tenant. The service principal is what administrators use for tenant-specific assignments, permissions, Conditional Access targeting, enterprise application settings, and access to Azure resources. Microsoft Learn

In the Microsoft Entra admin center, the representation listed under Enterprise applications is fundamentally the service principal. Microsoft explicitly describes an enterprise application as the tenant-local service principal representing an application. Microsoft Learn

A managed identity is a special form of service principal created for supported Azure workloads but isn ' t automatically created simply by registering an ordinary enterprise application. No normal user account is created, and certificates are optional authentication credentials that an administrator may configure later.