Understanding service-to-service authentication
As we mentioned before, access to an Azure key vault and its entities is usually granted on a per-user basis. So, to enable service-to-service authentication, you could create an Azure AD application with associated credentials and use this service principal to get an access token for your application. It's quite an easy process:
- Navigate to Azure Active Directory | App registrations in the Azure portal and select New registration to start the wizard.
Figure 5.2 – Creating a new app registration
- Enter a name and confirm your choice.
- Create a client secret by navigating to the Certificates & secrets option in app registration and then select New client secret.
Figure 5.3 – Creating a new client secret
- Enter a description and decide whether the secret will expire in 3, 6, 12, 18, or 24 months, or enter a custom period. After confirming...
