awatertrevi/infisical
1
0
Fork 0
mirror of https://github.com/awatertrevi/infisical.git synced 2026-09-22 13:39:35 +00:00
Code Issues Packages Projects Releases Wiki Activity

Address PR comments for Azure Client Secret Rotation

Browse Source
This commit is contained in:
carlosmonastyrski
2025-04-30 10:11:38 -03:00
parent 2a28d74bde
commit 98bb5d7aa7
5 changed files with 17 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files

15
docs/integrations/app-connections/azure-client-secrets.mdx
View File

@@ -23,7 +23,7 @@ Infisical currently only supports one method for connecting to Azure, which is O
![Azure client secrets](/images/integrations/azure-app-configuration/config-aad.png)
![Azure client secrets](/images/integrations/azure-app-configuration/config-new-app.png)
Create the application. As part of the form, set the **Redirect URI** to `https://your-domain.com/organization/app-connections/azure-client-secrets/oauth/callback`.
Create the application. As part of the form, set the **Redirect URI** to `https://your-domain.com/organization/app-connections/azure/oauth/callback`.
<Tip>
The domain you defined in the Redirect URI should be equivalent to the `SITE_URL` configured in your Infisical instance.
</Tip>
@@ -36,13 +36,20 @@ Infisical currently only supports one method for connecting to Azure, which is O
#### Azure Client Secrets permissions
Set the API permissions of the Azure application to include the following Azure Client Secrets permissions: `Application.ReadWrite.All`.
Set the API permissions of the Azure application to include the following Azure Client Secrets permissions:
- Microsoft Graph
- `Application.ReadWrite.All`
- Azure App Configuration
- `KeyValue.Delete`
- `KeyValue.Read`
- `KeyValue.Write`
![Azure client secrets](/images/integrations/azure-client-secrets/app-api-permissions.png)
</Step>
<Step title="Add your application credentials to Infisical">
Obtain the **Application (Client) ID** and **Directory (Tenant) ID** in Overview and generate a **Client Secret** in Certificate & secrets for your Azure application.
Obtain the **Application (Client) ID** and **Directory (Tenant) ID** (this will be used later in the Infisical connection) in Overview and generate a **Client Secret** in Certificate & secrets for your Azure application.
![Azure client secrets](../../images/app-connections/azure/client-secrets/config-credentials-1.png)
![Azure client secrets](../../images/integrations/azure-app-configuration/config-credentials-2.png)
@@ -70,7 +77,7 @@ Infisical currently only supports one method for connecting to Azure, which is O
Select the **Azure Connection** option from the connection options modal. ![Select Azure Connection](/images/app-connections/azure/client-secrets/select-connection.png)
</Step>
<Step title="Authorize Connection">
You can optionally authenticate against a specific tenant by providing the Azure Tenant or Directory ID.
Fill in the **Tenant ID** field with the Directory (Tenant) ID you obtained in the previous step.
Now select the **OAuth** method and click **Connect to Azure**.