---
title: "Integrate with Azure"
slug: "clm-integration-azure"
updated: 2026-11-03T14:47:50Z
published: 2026-11-03T14:47:50Z
canonical: "docs.senhasegura.io/clm-integration-azure"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.senhasegura.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Integrate with Azure

Certificate Manager integrates with Microsoft Azure to manage SAML certificates within Azure enterprise applications. Certificate Manager authenticates and interacts with Azure resources using a configured service account.

## Create an Azure application

1. Access [the Azure platform](https://portal.azure.com/) and log in to your account.
2. Locate the service **Microsoft Entra ID**.
3. From the side menu, go to **Manage > App registrations**.
4. Click **New registration**.
5. In the **Name *** field, enter a name for the application.
6. Select which account types can use the app or access the API.
7. Optional: Select the redirect URI to receive the authentication response.
8. Click **Register**.
9. In the **Essentials** section, copy the values of the following fields:
  - **Application (client) ID**.
  - **Directory (tenant) ID**.

## Create a client secret

1. Access the Azure platform and log in to your account.
2. Locate the service Microsoft Entra ID.
3. From the side menu, go to **Manage > App registrations**.
4. Go to the **All applications** tab and select the application you created.
5. From the application's side menu, go to **Manage > Certificates & secrets**.
6. Click **New client secret**.
7. In the **Description** field, enter a description for the client secret.
8. In the **Expires** field, select when the client secret will expire.
9. Click **Add**.

Alert

After creating the client secret, make sure to copy the **Value** field of the client secret. Otherwise, you will have to create another client secret.

## Select API permissions

1. Access the Azure platform and log in to your Azure account.
2. Locate the service Microsoft Entra ID.
3. From the side menu, go to **Manage > App registrations**.
4. Go to the **All applications** tab and select the application you created.
5. From the application's side menu, go to **Manage > API permissions**.
6. In the **Configured permissions** section, click **Add a permission** and select **Microsoft Graph**.
7. Select the **Application permissions** tab, then select the following permission: `Application.ReadWrite.All`.
8. Click **Add permissions**.
9. After adding the permissions, click **Grant admin consent for [Azure Active Directory name]** and select **Yes**.

Attention

This process is performed in a third-party platform and may change without notice.

## Integrate Azure with Certificate Manager

1. On Segura™ Platform, in the navigation bar, hover over the **Products menu** and select **Certificate Manager**.
2. From the side menu, go to **Management > Authorities** and click **Cloud providers**.
3. Go to **Add > Azure account**.
4. In the **Name *** and **Tenant ID *** fields, enter a name for the account and the tenant ID obtained in [Create an Azure application](/v4-2/docs/clm-integration-azure#create-an-azure-application).
5. In the **Status** field, enable or disable the account.
6. Check **Set the access data** to enter the account's access credentials.
7. In the **Client ID *** and **Client secret *** fields, enter the values obtained in [Create an Azure application](/v4-2/docs/clm-integration-azure#create-an-azure-application) and [Create a client secret](/v4-2/docs/clm-integration-azure#create-a-client-secret).
8. Click **Save**.

When you create a new account, the form also displays guidance on what the account can be used for, along with a link to this documentation. This guidance appears only when you create an account, not when you edit an existing one.

After you save the account, a confirmation dialog opens automatically. You cannot close it by clicking outside it. Click the button to go directly to the [Discovery using Microsoft Azure](/v4-2/docs/discovery-perform-azure-discovery) setup screen. If you do not have permission to create a discovery, the button appears disabled with an explanation of how to request access. To finish account creation without moving on to **Discovery**, close the dialog: the account is already saved, and you can navigate to **Discovery** manually later.

The newly added account will appear in the [Cloud providers](/v4-2/docs/clm-cloud-certificate-authorities) report.