Skip to content

Instantly share code, notes, and snippets.

1-Create azure key vault (Use AzurePortal or azure CLI and so on)
2-Create a secret (Use AzurePortal or azure CLI and so on)
3- Register your app with Azure Active Directory
3.1- Our app gets an identity
3.2- Now we can assign vault permissions to our app
3.3- App and users requires a token and a secret or certificate to authenticate to keyVault
3.4- This seems to be the default flow but with this you also need to keep the user/app secret to authenticate
with key vault somewhere. So to avoid this use Managed identities for azure resources
4- Enable Managed Identities (Use Azure portal or CLI) -> Go to your app, select identity tab, select on in the system assigned