Azure Key Vault

How to sync secrets from Infisical to Azure Key Vault

Usage

Prerequisites:

• Set up and add envars to Infisical Cloud
• Set up Azure and have an existing key vault

1. Authorize Infisical for Azure Key Vault

   Navigate to your project’s integrations tab

   

   Press on the Azure Key Vault tile and grant Infisical access to Azure Key Vault.

2. Start integration

   Obtain the Vault URI of your key vault in the Overview tab.

   

   Select which Infisical environment secrets you want to sync to your key vault. Then, input your Vault URI from the previous step. Finally, press create integration to start syncing secrets to Azure Key Vault.

   

   

Self-Hosted Setup

Using the Azure KV integration on a self-hosted instance of Infisical requires configuring an application in Azure and registering your instance with it.

1. Create an application in Azure

   Navigate to Azure Active Directory > App registrations to create a new application.

   

   Create the application. As part of the form, set the Redirect URI to https://your-domain.com/integrations/azure-key-vault/oauth2/callback.

   

2. Add your application credentials to Infisical

   Obtain the Application (Client) ID in Overview and generate a Client Secret in Certificate & secrets for your Azure application.

   

   Back in your Infisical instance, add two new environment variables for the credentials of your Azure application.

   • CLIENT_ID_AZURE: The Application (Client) ID of your Azure application.
   • CLIENT_SECRET_AZURE: The Client Secret of your Azure application.

   Once added, restart your Infisical instance and use the Azure KV integration.