Fortinet black logo

Creating an Azure Active Directory application

Creating an Azure Active Directory application

Create an Azure Active Directory application to authorize the function application to access the Azure resources.

  1. Sign in to your Azure Account through the Azure portal.
  2. Select Azure Active Directory.

  3. Select App registrations.
  4. Click New registration.
  5. Provide a name and URL for the application. For more information, refer to this Azure documentation.
    After setting the values, click Create. Take note of the application name. You will use it later.

Assigning the application to the owner role of the subscription

You must assign the application to the owner role of the subscription where the HA resources will be deployed to ensure it can have the privilege to authorize the HA resources in the subscription.

  1. Go to Subscriptions, choose the subscription to assign the application to. This is the subscription in which all the resources in the HA cluster will be deployed.
  2. Go to Access control (IAM), and select the Role assignments tab.
  3. Click Add > Add role assignment.
  4. On the Roles tab, select Owner and click Next.
  5. On the Members tab, select User group, or service principal. In the Members field, select the application name you want to assign the Owner role to.
  6. Click Review + assign.

Getting the Application ID and authentication key

  1. Go to Azure Active Directory > App registrations.
  2. Select the function App you have just created. Take note of the Application ID. It will be used in later steps.
  3. Select Certificates & secrets and select the Client secrets tab. Click New client secret to create a new secret.
  4. Enter a description for the secret, select when it would expire.
  5. Click Add.
  6. Take note of the Value of the secret. It will be used in later steps.
    Note: It is recommended that you copy this value as it cannot be retrieved later. This key value and the application ID is required to sign in as the application. Store the key value where your application can retrieve it.

Creating an Azure Active Directory application

Create an Azure Active Directory application to authorize the function application to access the Azure resources.

  1. Sign in to your Azure Account through the Azure portal.
  2. Select Azure Active Directory.

  3. Select App registrations.
  4. Click New registration.
  5. Provide a name and URL for the application. For more information, refer to this Azure documentation.
    After setting the values, click Create. Take note of the application name. You will use it later.

Assigning the application to the owner role of the subscription

You must assign the application to the owner role of the subscription where the HA resources will be deployed to ensure it can have the privilege to authorize the HA resources in the subscription.

  1. Go to Subscriptions, choose the subscription to assign the application to. This is the subscription in which all the resources in the HA cluster will be deployed.
  2. Go to Access control (IAM), and select the Role assignments tab.
  3. Click Add > Add role assignment.
  4. On the Roles tab, select Owner and click Next.
  5. On the Members tab, select User group, or service principal. In the Members field, select the application name you want to assign the Owner role to.
  6. Click Review + assign.

Getting the Application ID and authentication key

  1. Go to Azure Active Directory > App registrations.
  2. Select the function App you have just created. Take note of the Application ID. It will be used in later steps.
  3. Select Certificates & secrets and select the Client secrets tab. Click New client secret to create a new secret.
  4. Enter a description for the secret, select when it would expire.
  5. Click Add.
  6. Take note of the Value of the secret. It will be used in later steps.
    Note: It is recommended that you copy this value as it cannot be retrieved later. This key value and the application ID is required to sign in as the application. Store the key value where your application can retrieve it.