Questions tagged [service-principal]

161 questions
4
votes
2 answers

Azure Function using MSI - Error Requesting Token

I have a Function in Azure, which has MSI (Managed Service Identity) enabled which I am trying to use to access an Azure based WebAPI (App Service WebApp) which in turn has Azure AD Authentication enabled (all same Azure Directory). My WebAPI has an…
3
votes
1 answer

How to create a service principal without app, and create an app without service principal in Azure AD

Recently I watched a course on Pluralsight.com, Getting Started with Azure Active Directory for Developers. In the section, Service Principals->Apps and Service Principals, the author said that we can create a service principal without app, and it's…
cateyes
  • 5,208
  • 2
  • 24
  • 31
3
votes
1 answer

how to create service principle key in Azure

I need to create a service connection in Azure DevOps for service type "Azure Resource Manager". When I am trying "Service principal (automatic)", I am able to do with proper permission. But when I am trying "Service principal (manual)", it needs…
VKD
  • 633
  • 2
  • 12
  • 28
3
votes
1 answer

az aks create - it used to create Service Principal now Managed Service Identity

Update: A colleague who works for Microsoft said: Changelog entry for this behaviour change is here: https://github.com/MicrosoftDocs/azure-docs-cli/blob/master/docs-ref-conceptual/release-notes-azure-cli.md#aks-3 I'm following the proper…
Jeremy Thompson
  • 61,933
  • 36
  • 195
  • 321
3
votes
3 answers

Is there a way to use ARM Template to create an Azure Service Principal?

I am trying to write an ARM template that can create a service principal on Azure with all the specified permissions. The end goal is to automate this process and create n number of service principals using the template. Is there a way to do this?…
3
votes
1 answer

service principal account on-prem AD Connect sync

creating an SPN in Azure (single AD tenant) works very well, however, due some compliance reasons, organization says we have to creaty every user (including service ones) using on-prem AD, then sync via AD connect to Azure AD tenant. That works very…
3
votes
2 answers

How to create Azure DevOps Service Connection scoped to multiple Resource Groups

I have a project whose resources spanned across 3 resource groups. I want to create a Service connection scoped to all those resource groups so that i can manage access at one place through that service connection. Currently i created 3 service…
3
votes
1 answer

How to authenticate to an Azure Function using function auth or Azure AD service principal

I have an Azure function which I'm using to fetch data from Azure AD, but I want to limit who can use the Function as it will be using a HTTP trigger so that I will be able to call the function from a Logic App later down the road. So as HTTP…
3
votes
3 answers

Service Principal Creation by Terraform doesn't provide password/secret in the output

when generating Service Principal in Azure manually, as a result of the operation I'm provided a password. It's not the case however if I create service principal with Terraform, the password is not among the outputs of this module: +…
Bernard Halas
  • 972
  • 11
  • 24
3
votes
2 answers

Azure Service Principal pull images from Container Registry

I have created a Azure Service Principal like this az ad sp create-for-rbac --name $SERVICE_PRINCIPAL_NAME --scopes $ACR_REGISTRY_ID --role reader after logging in (az login --service-principal -u $SERVICE_PRINCIPAL_NAME -p $SERVICE_PRINCIPAL_ID…
3
votes
4 answers

How to log in to Azure service principal

Connect-AzureRMAccount doesn't work. I don't care. I don't want to run through the process of needing a PhD to understand why PowerShell never wants to work. So I'm going to use Login-AzureRMAccount I've followed the docs. Of course it's inadequate…
3
votes
2 answers

How to configure consenting for an Azure app (AADSTS65005 error)

We have an Azure resource app whose APIs we want to expose for access by a client app on Azure. The two apps are on different tenants. The users accessing the APIs (Office 365 account holders) are on different tenants. The whole set up works when we…
3
votes
1 answer

Azure App Service Deployments - Minimum Role for Service Principal Account

I am deploying a standard ASP.NET MVC application to an Azure App Service using a VSTS build and release definition. The VSTS instance and the target Azure subscription are on separate Azure accounts/subscriptions so we have create a Azure AD…
3
votes
0 answers

Error while getting the OAuth token from AAD for AppPrincipalId

I am creating HDInsight using Data Lake Store using service principal via Template Deployment(shell script). While I run the deployment script I got the following error after the initial cluster creation of Spark HDInsight cluster. Error is : At…
sathya
  • 1,982
  • 1
  • 20
  • 37
2
votes
1 answer

Azure KeyVault: how to retrieve clientId, clientSecret and the tenantId for an existing Service Principal?

The cloud engineer in my organization has set up an Azure KeyVault and a Service Principal. I know the id of this Service Principal, but I also need clientId, clientSecret, and tenantId. The documentation shows that these variables are exposed to…
Zizzipupp
  • 1,301
  • 1
  • 11
  • 27
1
2
3
10 11