Can on-premises app perform Azure AD Integrated authentication to Azure KeyVault

MS Techie 2,701 Reputation points
2020-10-28T14:04:13.52+00:00

I read on this link , that we can use AD Integrated authentication to access Azure Key Vault from on-premises application . I know Azure Key Vault supports different authentication types like Managed Identity, by using certificate or by presenting client id and client secret etc .... but my question is can we use Active Directory Integrated Authentication from on-premises application.

I have already configured my Azure SQL PaaS to have AD Integrated Authentication , which has ADFS enabled to Azure AD .... but my question is can we achieve the same for Azure Key Vault and how ?

Please help

Azure Key Vault
Azure Key Vault
An Azure service that is used to manage and protect cryptographic keys and other secrets used by cloud apps and services.
1,283 questions

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. JamesTran-MSFT 36,621 Reputation points Microsoft Employee
    2020-10-29T22:02:03.147+00:00

    @MS Techie
    Thank you for your time and patience throughout this issue, I received a response from our Key Vault SMEs and will post their response below.

    KV team update:
    It's in theory possible using the .NET Microsoft.Azure.Services.AppAuthentication library as long as the on-prem AD environment is synced to AAD and the on-prem machine is a domain-joined machine as explained in here. However, for local development, the easiest and recommended way is to use VS credentials.

    You should also take into account that the Microsoft.Azure.Services.AppAuthentication library, is no longer recommended to use with new KV SDK, instead, you should be using the new Azure Identity client library available for .NET, Java, TypeScript and Python and should be used for all new development.

    If you have any other questions, please let me know.
    Thank you for your time and patience throughout this issue.

    1 person found this answer helpful.

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.