Reputation: 73
Is there a way to connect an Azure Active Directory application to a key vault to access a certificate rather than uploading the certificate file in the Certificate & Secrets section in the Azure portal?
Upvotes: 4
Views: 2117
Reputation: 181
Not an actual answer, but I thought I could add this to the discussion: If you are using terraform to manage your infrastructure, you could use azurerm_key_vault_certificate.certificate_data_base64 resource attribute to update azuread_application_certificate.value. As @user587585, this is just "free advice".
Upvotes: 0
Reputation: 21
NO: it is not possible to ingegrate App Registration with KeyVault natively.
Adding this response as other answers are distracting and are general "free advice"
Upvotes: 0
Reputation: 58733
No. A certificate credential in AAD always has the public key in the Application/Service principal object. There is no way to refer to a certificate in Key Vault.
Upvotes: 2