mirror of
https://github.com/Infisical/infisical.git
synced 2026-01-09 15:38:03 -05:00
97 lines
4.5 KiB
Plaintext
97 lines
4.5 KiB
Plaintext
---
|
|
title: "Azure Connection"
|
|
description: "Learn how to configure a Azure Connection for Infisical."
|
|
---
|
|
|
|
Infisical currently only supports one method for connecting to Azure, which is OAuth.
|
|
|
|
<Accordion title="Self-Hosted Instance">
|
|
Using the Azure App Configuration integration on a self-hosted instance of Infisical requires configuring an application in Azure
|
|
and registering your instance with it.
|
|
|
|
**Prerequisites:**
|
|
|
|
- Set up Azure and have an existing App Configuration instance.
|
|
|
|
<Steps>
|
|
<Step title="Create an application in Azure">
|
|
Navigate to Azure Active Directory > App registrations to create a new application.
|
|
|
|
<Info>
|
|
Azure Active Directory is now Microsoft Entra ID.
|
|
</Info>
|
|
|
|
|
|
|
|
Create the application. As part of the form, set the **Redirect URI** to `https://your-domain.com/integrations/azure-app-configuration/oauth2/callback`.
|
|
<Tip>
|
|
The domain you defined in the Redirect URI should be equivalent to the `SITE_URL` configured in your Infisical instance.
|
|
</Tip>
|
|
|
|
|
|
</Step>
|
|
<Step title="Assign API permissions to the application">
|
|
|
|
For the Azure Connection to work with both Key Vault and App Configuration, you need to assign multiple permissions to the application.
|
|
|
|
#### Azure App Configuration permissions
|
|
|
|
Set the API permissions of the Azure application to include the following Azure App Configuration permissions: `KeyValue.Delete`, `KeyValue.Read`, and `KeyValue.Write`.
|
|
|
|
|
|
#### Azure Key Vault permissions
|
|
|
|
Set the API permissions of the Azure application to include `user.impersonation` for the Key Vault API.
|
|
|
|
|
|
</Step>
|
|
<Step title="Add your application credentials to Infisical">
|
|
Obtain the **Application (Client) ID** in Overview and generate a **Client Secret** in Certificate & secrets for your Azure application.
|
|
|
|
|
|
|
|
|
|
|
|
Back in your Infisical instance, add two new environment variables for the credentials of your Azure application.
|
|
|
|
- `INF_APP_CONNECTION_AZURE_CLIENT_ID`: The **Application (Client) ID** of your Azure application.
|
|
- `INF_APP_CONNECTION_AZURE_CLIENT_SECRET`: The **Client Secret** of your Azure application.
|
|
|
|
Once added, restart your Infisical instance and use the Azure App Configuration integration.
|
|
</Step>
|
|
</Steps>
|
|
|
|
</Accordion>
|
|
|
|
## Setup Azure Connection in Infisical
|
|
|
|
<Steps>
|
|
<Step title="Navigate to the App Connections">
|
|
Navigate to the **App Connections** tab on the **Organization Settings** page. 
|
|
</Step>
|
|
<Step title="Add Connection">
|
|
Select the **Azure Connection** option from the connection options modal. 
|
|
</Step>
|
|
<Step title="Authorize Connection">
|
|
You must select the resource that you intend to use this connection for _(Azure Key Vault or Azure App Configuration)_.
|
|
|
|
You can optionally authenticate against a specific tenant by providing the Azure Tenant or Directory ID.
|
|
|
|
Now select the **OAuth** method and click **Connect to Azure**.
|
|
|
|
|
|
|
|
|
|
|
|
</Step>
|
|
<Step title="Grant Access">
|
|
You will then be redirected to the GitHub to grant Infisical access to your GitHub account (organization and repo privileges). Once granted,
|
|
you will redirect you back to Infisical's App Connections page. 
|
|
</Step>
|
|
<Step title="Connection Created">
|
|
Your **GitHub Connection** is now available for use. 
|
|
</Step>
|
|
</Steps>
|