mirror of
https://github.com/awatertrevi/infisical.git
synced 2026-09-22 13:39:35 +00:00
90 lines
3.9 KiB
Plaintext
90 lines
3.9 KiB
Plaintext
---
|
|
title: "Azure Key Vault Connection"
|
|
description: "Learn how to configure a Azure Key Vault Connection for Infisical."
|
|
---
|
|
|
|
Infisical currently only supports one method for connecting to Azure, which is OAuth.
|
|
|
|
<Accordion title="Self-Hosted Instance">
|
|
Using the Azure Key Vault connection on a self-hosted instance of Infisical requires configuring an application in Azure
|
|
and registering your instance with it.
|
|
|
|
**Prerequisites:**
|
|
|
|
- Set up Azure and have an existing Key Vault instance.
|
|
|
|
<Steps>
|
|
<Step title="Create an application in Azure">
|
|
Navigate to Azure Active Directory > App registrations to create a new application.
|
|
|
|
<Info>
|
|
Azure Active Directory is now Microsoft Entra ID.
|
|
</Info>
|
|
|
|
|
|
|
|
Create the application. As part of the form, set the **Redirect URI** to `https://your-domain.com/organization/app-connections/azure/oauth/callback`.
|
|
<Tip>
|
|
The domain you defined in the Redirect URI should be equivalent to the `SITE_URL` configured in your Infisical instance.
|
|
</Tip>
|
|
|
|
|
|
</Step>
|
|
<Step title="Assign API permissions to the application">
|
|
|
|
For the Azure Connection to work with Key Vault, you need to assign multiple permissions to the application.
|
|
|
|
#### Azure Key Vault permissions
|
|
|
|
Set the API permissions of the Azure application to include `user.impersonation` for the Key Vault API.
|
|
|
|
|
|
</Step>
|
|
<Step title="Add your application credentials to Infisical">
|
|
Obtain the **Application (Client) ID** in Overview and generate a **Client Secret** in Certificate & secrets for your Azure application.
|
|
|
|
|
|
|
|
|
|
|
|
Back in your Infisical instance, add two new environment variables for the credentials of your Azure application.
|
|
|
|
- `INF_APP_CONNECTION_AZURE_CLIENT_ID`: The **Application (Client) ID** of your Azure application.
|
|
- `INF_APP_CONNECTION_AZURE_CLIENT_SECRET`: The **Client Secret** of your Azure application.
|
|
|
|
Once added, restart your Infisical instance and use the Azure Key Vault connection.
|
|
</Step>
|
|
</Steps>
|
|
|
|
</Accordion>
|
|
|
|
## Setup Azure Connection in Infisical
|
|
|
|
<Steps>
|
|
<Step title="Navigate to the App Connections">
|
|
Navigate to the **App Connections** tab on the **Organization Settings** page. 
|
|
</Step>
|
|
<Step title="Add Connection">
|
|
Select the **Azure Connection** option from the connection options modal. 
|
|
</Step>
|
|
<Step title="Authorize Connection">
|
|
You can optionally authenticate against a specific tenant by providing the Azure Tenant or Directory ID.
|
|
|
|
Now select the **OAuth** method and click **Connect to Azure**.
|
|
|
|
|
|
|
|
|
|
|
|
</Step>
|
|
<Step title="Grant Access">
|
|
You will then be redirected to Azure to grant Infisical access to your Azure account. Once granted,
|
|
you will redirect you back to Infisical's App Connections page. 
|
|
</Step>
|
|
<Step title="Connection Created">
|
|
Your **Azure Key Vault Connection** is now available for use. 
|
|
</Step>
|
|
</Steps>
|