Skip to content
Merged
Changes from 6 commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
30 changes: 21 additions & 9 deletions content-repo/extra-docs/articles/microsoft-auth-guide.md
Original file line number Diff line number Diff line change
Expand Up @@ -259,19 +259,31 @@ The Redirect URI is the address where Azure AD sends the login response. If you
**Note:** Make sure the neccessary permissions and roles are applied to the application and the user.

# Azure Managed Identities Authentication
#### Note: This option applies only when the integration runs on an Azure VM.

Some Cortex XSOAR-Microsoft integrations use [Azure Managed Identities Authentication](https://learn.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/overview).
### Applicable only when the integration runs on an Azure VM

Follow one of these steps for authentication based on Azure Managed Identities:
Some Cortex XSOAR/XSIAM Microsoft integrations support Azure Managed Identities Authentication.

- ##### To use System Assigned Managed Identity
- Select **Azure Managed Identities** from the **Authentication Type** drop down or select the **Use Azure Managed Identities** checkbox and leave the **Azure Managed Identities Client ID** field empty.
Azure provides two types of Managed Identities:

1. **System-assigned**: Automatically created and tied to a specific Azure resource; deleted when the resource is deleted.
2. **User-assigned**: A standalone identity that can be assigned to one or more Azure resources and exists independently of them.

For more details, you can also watch the video in Microsoft [documentations](https://learn.microsoft.com/en-us/entra/identity/managed-identities-azure-resources/overview).

Important: Either the integration or XSOAR must be running on an Azure VM; otherwise, the connection will not work.
For XSOAR 8 and above, the integration must run on an engine to connect with Azure.

**Once the integration is running on an Azure VM, follow the steps below to configure authentication using Azure Managed Identities:**

- #### Using System Assigned Managed Identity
Select **Azure Managed Identities** from the **Authentication Type** drop down or select the **Use Azure Managed Identities** checkbox and leave the **Azure Managed Identities Client ID** field empty.

- #### Using User Assigned Managed Identity
1. Go to [Azure Portal](https://portal.azure.com/) -> **Managed Identities**.
2. Select your User Assigned Managed Identity -> copy the Client ID -> paste it in the **Azure Managed Identities Client ID** field in the instance settings.
3. Select **Azure Managed Identities** from the **Authentication Type** drop down or select the **Use Azure Managed Identities** checkbox.

- ##### To use User Assigned Managed Identity
1. Go to [Azure Portal](https://portal.azure.com/) -> **Managed Identities**.
2. Select your User Assigned Managed Identity -> copy the Client ID -> paste it in the **Azure Managed Identities Client ID** field in the instance settings.
3. Select **Azure Managed Identities** from the **Authentication Type** drop down or select the **Use Azure Managed Identities** checkbox.

# Revoke Consent

Expand Down
Loading