Azure Key Vault Connection

Navigate to Azure Active Directory > App registrations to create a new application.

Create the application. As part of the form, set the Redirect URI to https://your-domain.com/organization/app-connections/azure/oauth/callback.

For the Azure Connection to work with Key Vault, you need to assign multiple permissions to the application.

Azure Key Vault permissions

Set the API permissions of the Azure application to include user.impersonation for the Key Vault API.

Obtain the Application (Client) ID in Overview and generate a Client Secret in Certificate & secrets for your Azure application.

Back in your Infisical instance, add two new environment variables for the credentials of your Azure application.

• INF_APP_CONNECTION_AZURE_CLIENT_ID: The Application (Client) ID of your Azure application.
• INF_APP_CONNECTION_AZURE_CLIENT_SECRET: The Client Secret of your Azure application.

Once added, restart your Infisical instance and use the Azure Key Vault connection.