- Create Service Principal - to be presented to APIM for Auth token
- Create App Registration
- Under Token configuration, add optional claim to ensure only app call end point not the user/human
- No explicit permission needed
- Add the Application URI
- No explicit scopes needed
- No RBACs as resources level as this is for API not users
- SPN Name: dept-proj-env-oauth
- SPN API Permissions: none
- SPN RBAC permissions: none
- SPN RBAC permission scope: none
- Create Policy for APIM to validate request
- Write the policy,
- Route the backend if request successful
- ADF pipeline to use api://imdev-dev part of the REST request ( which is also application URI for SPN)
Principal Architect ( Data & AI) Over 22 yrs. of experience in IT. Global Delivery Models.
Monday, March 1, 2021
Azure: Setup OAuth2.0 between ADF and APIM for secured and authenticated traffic
Subscribe to:
Post Comments (Atom)
No comments:
Post a Comment