Azure Key Vault

Define a Key Vault in Azure

Log on to the portal.azure.com . Define a new Key Vault and an App registration with client secret that has access to the Key Vault. You need to keep the following data from the portal to store in Finance and Operations.

Name in Azure
DNS Name of the Key vault
Key Vault URL
The App registration's Client Id 

Name in Finance and Operations.
Key Vault client
Client secret for the App registration
Key Vault secret key  

Setting up Key Vault Parameters in Finance and Operations

The data in the Key Vault Parameters are saved per company. The Integration Suite operates cross-company and instead of defining one Key Vault per company or replicating the data across all the legal entities, we use the DAT company as the shared Azure Key Vault.

Navigate to the DAT company and open the Key Vault Parameters. Add a new record and give it a name and description. The three values in the list above, is placed in the corresponding fields in Finance and Operations..

System administration | Setup | Key Vault parameters

It's recommended to use the same name in Finance and Operations as used on the Azure Key Vault, this makes it easier to maintain several environments and key vaults over time.

Adding secrets

You can now add as many secrets you need. Give your secret a name and a description. Again it is recommended to use the same the name of the secrets in both Azure and Finance and Operations. The secret field must have the following syntax:

vault://[keyvaultname]/[secretname][secretversion]

The [secretversion] is not mandatory, but once you start updating and as secrets expire it is recommended to use this option instead of creating new secrets.