Integrate with Azure

Certificate Manager integrates with Microsoft Azure to manage SAML certificates within Azure enterprise applications. Certificate Manager authenticates and interacts with Azure resources using a configured service account.

Create an Azure application

1. Access the Azure platform and log in to your account.
2. Locate the service Microsoft Entra ID.
3. From the side menu, go to Manage > App registrations.
4. Click New registration.
5. In the Name * field, enter a name for the application.
6. Select which account types can use the app or access the API.
7. Optional: Select the redirect URI to receive the authentication response.
8. Click Register.
9. In the Essentials section, copy the values of the following fields:
   • Application (client) ID.
   • Directory (tenant) ID.

Create a client secret

1. Access the Azure platform and log in to your account.
2. Locate the service Microsoft Entra ID.
3. From the side menu, go to Manage > App registrations.
4. Go to the All applications tab and select the application you created.
5. From the application's side menu, go to Manage > Certificates & secrets.
6. Click New client secret.
7. In the Description field, enter a description for the client secret.
8. In the Expires field, select when the client secret will expire.
9. Click Add.

Select API permissions

1. Access the Azure platform and log in to your Azure account.
2. Locate the service Microsoft Entra ID.
3. From the side menu, go to Manage > App registrations.
4. Go to the All applications tab and select the application you created.
5. From the application's side menu, go to Manage > API permissions.
6. In the Configured permissions section, click Add a permission and select Microsoft Graph.
7. Select the Application permissions tab, then select the following permission: Application.ReadWrite.All.
8. Click Add permissions.
9. After adding the permissions, click Grant admin consent for [Azure Active Directory name] and select Yes.

Integrate Azure with Certificate Manager

1. On Segura® Platform, in the navigation bar, hover over the Products menu and select Certificate Manager.
2. From the side menu, go to Management > Authorities and click Cloud providers.
3. Go to Add > Azure account.
4. In the Name * and Tenant ID * fields, enter a name for the account and the tenant ID obtained in Create an Azure application.
5. In the Status field, enable or disable the account.
6. Check Set the access data to enter the account's access credentials.
7. In the Client ID * and Client secret * fields, enter the values obtained in Create an Azure application and Create a client secret.
8. Click Save.

When you create a new account, the form also displays guidance on what the account can be used for, along with a link to this documentation. This guidance appears only when you create an account, not when you edit an existing one.

After you save the account, a confirmation dialog opens automatically. You cannot close it by clicking outside it. Click the button to go directly to the Discovery using Microsoft Azure setup screen. If you do not have permission to create a discovery, the button appears disabled with an explanation of how to request access. To finish account creation without moving on to Discovery, close the dialog: the account is already saved, and you can navigate to Discovery manually later.

The newly added account will appear in the Cloud providers report.