Articles in this section

Set up a connection to Azure Key Vault

Naga Sri Hari Gonaboyina
Updated

Azure Key Vault is a cloud service that stores and manages secrets, encryption keys, and certificates to protect sensitive data and control secure access in applications.

Set up a connection

After you start the connection, configure it in the Create connection panel and complete all of the required * authentication settings:

Setting

Instructions

Name your connection * 

Enter a clear and distinguishable name.

Throughout integrator.io imports and exports, you will have the option to choose this new connection. A unique identifier will prove helpful later when selecting it from a list of the connections in your account.

API type * 

Select your Azure Key Vault API type:

  • Control plane: Create, update, or delete vaults and configure access policies to manage who can access and use the vault

  • Data plane: Access and manage secrets, keys, and certificates stored inside the vault to handle sensitive data securely

OAuth 2.0 client *  

Select the OAuth 2.0 client that stores the client ID and client secret provided to you by Azure Key Vault.

To add an OAuth 2.0 client and configure your credentials, click the plus ( + ) button. Click the edit (pencil.svg) button to modify a selected OAuth 2.0 client. For more information, see Create an OAuth 2.0 iClient resource.

dataLoad.svg​​ How to retrieve the client ID and client secret 

Scopes * 

Scopes are OAuth 2.0 permissions that Azure Key Vault defines to limit access to your account.

dataLoad.svg​​ How to configure scopes

Vault URL * 

(Only for Data plane API type)

Enter your Azure Key Vault URL (for example, https://celigo.vault.azure.net).

Tip

This connector documentation describes only the settings shown for the Simple view. For the corresponding HTTP settings, see the OAuth 2.0 auth universal connector documentation.

How to retrieve the client ID and client secret

  1. Sign in to your Microsoft Azure developer account.

  2. Navigate to App registrations and click the required app. For information on how to create a new app, see Register an application.

  3. From Essentials, copy the Client ID (Application ID).

  4. Navigate Certificates and secrets > Client secrets.

  5. Click + New client secret. The Add a client secret panel opens.

  6. Enter Description.

  7. Click Add.

  8. Copy the Client secret (Value).

How to configure the scopes

  1. Click Scope.

  2. To access all of the scopes in the API, click the » button.

    – or – 

    Check the scopes you want to add and click the > button.

  3. Click Save.

Save and authorize

  1. Click Save & authorize to commit your changes and proceed to sign in with Microsoft Azure Key Vault.

  2. Read the app information and click Allow access.

Additional references