Skip to content

Latest commit

 

History

History
65 lines (51 loc) · 2.45 KB

azure-ad-authentication-configuration.md

File metadata and controls

65 lines (51 loc) · 2.45 KB

Azure Active Directory Authentication Configuration

First Available: 7.1

Azure Active Directory authentication must be configured before dotnet monitor starts, it does not support being configured or changed at runtime.

Important

See Security Considerations for important information regarding configuring Azure Activity Directory authentication.

Configuration Options

Note

Starting in 9.0 RC 2, the TenantId option is now required.

Name Type Required Description
ClientId string true The unique application (client) id assigned to the app registration in Azure Active Directory.
RequiredRole string true The role required to be able to authenticate.
AppIdUri uri false The App ID URI of the app registration. Defaults to api://{ClientId} if not specified.
Instance uri false Specifies the Azure cloud instance users are signing in from. Can be either the Azure public cloud or one of the national clouds. Defaults to the Azure public cloud (https://login.microsoftonline.com).
TenantId (9.0 RC 2+) string true The tenant id of the Azure Active Directory tenant.
TenantId string false The tenant id of the Azure Active Directory tenant. Defaults to organizations.

A minimal configuration requires setting just the TenantId, ClientId, and RequiredRole.

Example Configuration

JSON 
{
    "Authentication": {
        "AzureAd": {
          "TenantId": "6f565143-0d4c-4e44-a35b-974e4b2f78a0",
          "ClientId": "5eaf6ccc-e8c1-47c6-a68c-a6453172c655",
          "RequiredRole": "Application.Access"
        }
    }
}
Kubernetes ConfigMap 
Authentication__AzureAd__TenantId: "6f565143-0d4c-4e44-a35b-974e4b2f78a0"
Authentication__AzureAd__ClientId: "5eaf6ccc-e8c1-47c6-a68c-a6453172c655"
Authentication__AzureAd__RequiredRole: "Application.Access"
Kubernetes Environment Variables 
- name: DotnetMonitor_Authentication__AzureAd__TenantId
  value: "6f565143-0d4c-4e44-a35b-974e4b2f78a0"
- name: DotnetMonitor_Authentication__AzureAd__ClientId
  value: "5eaf6ccc-e8c1-47c6-a68c-a6453172c655"
- name: DotnetMonitor_Authentication__AzureAd__RequiredRole
  value: "Application.Access"