Configuration: Using a key vault for the client id and client secret - akumina/AkuminaDev GitHub Wiki

Applies to

Akumina 4.1.1901.0110 and later

Introduction

This article details how to configure the Akumina App Manager to obtain the client id and client secret from a key vault. This also applied for the Content Distribution client id and secret values.

Assumptions

It is assumed that you have the ClientId,ClientSecret,AppOnlyClientId and AppOnlyClientSecret keys from the web.config file.

NOTE: AppOnlyClientId and AppOnlyClientSecret may not be in use.

Add the keys to the key vault

In the Azure key vault, create a new secret. For the Value, set it to be:

{"ClientId":"<value>","ClientSecret":"<value>","AppOnlyClientId":"<value>","AppOnlyClientSecret":"<value>"}

NOTE: This is case sensitive.

With the respective values for ClientId,ClientSecret,AppOnlyClientId and AppOnlyClientSecret.

Edit the config file

Add the following key into appsettings, using the key vault url as the value:

<add key="akumina:SpClientIdSecretKeyVaultUri" value="<keyvaulturi>"/>

Remove the client id and secret values from the web.config

In the web.config file, remove the values present in the ClientId,ClientSecret,AppOnlyClientId and AppOnlyClientSecret keys.

<add key="ClientId" value="" />
<add key="ClientSecret" value="" />
<add key="AppOnlyClientId" value="" />
<add key="AppOnlyClientSecret" value="" />
⚠️ **GitHub.com Fallback** ⚠️