Azure Key Vault
Define a Key Vault in Azure
Log on to the portal.azure.com . Define a new Key Vault and an App registration with client secret that has access to the Key Vault. You need to keep the following data from the portal to store in Finance and Operations.
Name in Azure
DNS Name of the Key vault
Key Vault URL
The App registration's Client Id
Name in Finance and Operations.
Key Vault client
Client secret for the App registration
Key Vault secret key
Setting up Key Vault Parameters in Finance and Operations
The data in the Key Vault Parameters are saved per company. The Integration Suite operates cross-company and instead of defining one Key Vault per company or replicating the data across all the legal entities, we use the DAT company as the shared Azure Key Vault.
Navigate to the DAT company and open the Key Vault Parameters. Add a new record and give it a name and description. The three values in the list above, is placed in the corresponding fields in Finance and Operations..
System administration | Setup | Key Vault parameters
It's recommended to use the same name in Finance and Operations as used on the Azure Key Vault, this makes it easier to maintain several environments and key vaults over time.
Adding secrets
You can now add as many secrets you need. Give your secret a name and a description. Again it is recommended to use the same the name of the secrets in both Azure and Finance and Operations. The secret field must have the following syntax:
vault://[keyvaultname]/[secretname][secretversion]
The [secretversion] is not mandatory, but once you start updating and as secrets expire it is recommended to use this option instead of creating new secrets.