Monday, March 1, 2021

Azure: Setup OAuth2.0 between ADF and APIM for secured and authenticated traffic

  •  Create Service Principal - to be presented to APIM for Auth token
    • Create App Registration
    • Under Token configuration, add optional claim to ensure only app call end point not the user/human
    • No explicit permission needed
    • Add the Application URI
    • No explicit scopes needed
    • No RBACs as resources level as this is for API not users

    • SPN Name: dept-proj-env-oauth
    • SPN API Permissions: none
    • SPN RBAC permissions: none
    • SPN RBAC permission scope: none

  • Create Policy for APIM to validate request
    • Write the policy, 
    • Route the backend if request successful
  • ADF pipeline to use api://imdev-dev part of the REST request ( which is also application URI for SPN)

No comments: