{"id":73345,"date":"2018-04-10T09:00:40","date_gmt":"2018-04-10T16:00:40","guid":{"rendered":"https:\/\/open.microsoft.com\/?p=73345"},"modified":"2025-01-24T12:39:29","modified_gmt":"2025-01-24T20:39:29","slug":"scaling-tips-hashicorp-vault-azure-active-directory","status":"publish","type":"post","link":"https:\/\/opensource.microsoft.com\/blog\/2018\/04\/10\/scaling-tips-hashicorp-vault-azure-active-directory\/","title":{"rendered":"HashiCorp Vault speaks Azure Active Directory"},"content":{"rendered":"\n<p>As an increasing number of customers move to the cloud, including multi-cloud and hybrid environments, securing infrastructure at scale emerges as one of the key challenges. There are many components to working securely in cloud environments, with one of key aspects being properly managing access to services deployed and ensuring these services stay secure as infrastructure needs accelerate exponentially.<\/p>\n\n\n\n<p>HashiCorp Vault integration with Azure Active Directory (AAD), <a href=\"https:\/\/www.hashicorp.com\/blog\/vault-0-10\">available in Vault 0.10<\/a>, gives you a way to leverage identity information stored in AAD to control access to secrets stored in Vault. When combined with <a href=\"https:\/\/docs.microsoft.com\/en-us\/azure\/active-directory\/managed-service-identity\/overview\">Managed Service Identity<\/a>, a feature of AAD, this integration gives Azure customers an easy way to bootstrap identity and access to secrets in the HashiCorp Vault. You can learn more about HashiCorp Vault and all the powerful features it provides <a href=\"https:\/\/www.vaultproject.io\/docs\/index.html\">at vaultproject.io<\/a>.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"configuring-aad-authentication-for-vault\">Configuring AAD Authentication for Vault<\/h2>\n\n\n\n<p>For resources running in Azure, Vault AAD Authentication offers the most benefit when combined with the Managed Service Identity (MSI) feature of Azure Active Directory since Vault treats AAD as a trusted third party. AAD authentication tokens provided by MSI enable integrated authentication to Vault.<\/p>\n\n\n\n<p>To enable AAD Authentication for Vault, make sure you are running Vault version 0.10 or later, then issue the following command:<\/p>\n\n\n<div class=\"wp-block-syntaxhighlighter-code \"><pre class=\"brush: plain; auto-links: false; gutter: false; title: ; quick-code: false; notranslate\" title=\"\">\nvault auth enable azure\n<\/pre><\/div>\n\n\n<p>Vault can use the MSI of the machine that it\u2019s running on to perform calls into Azure, as illustrated below. Alternatively, you can configure separate credentials that the plugin will use, as described in the configuration section of <a href=\"https:\/\/www.vaultproject.io\/api\/auth\/azure\/index.html\">Vault AAD Auth API documentation<\/a>.<\/p>\n\n\n\n<p>Finally, you should create a set of Vault roles to properly constrain access to the secrets in Vault.<\/p>\n\n\n\n<p>For detailed guidance on configuring Vault AAD Authentication, visit <a href=\"https:\/\/www.vaultproject.io\/docs\/auth\/azure.html\">Vault AAD integration documentation<\/a>.<\/p>\n\n\n<figure class=\"wp-block-image size-large\"><img decoding=\"async\" src=\"https:\/\/opensource.microsoft.com\/blog\/wp-content\/uploads\/2018\/04\/vault-aad1-1024x614.webp\" alt=\"azurevault terminal\" class=\"wp-image-73350 webp-format\" srcset=\"https:\/\/opensource.microsoft.com\/blog\/wp-content\/uploads\/2018\/04\/vault-aad1-1024x614.webp 1024w, https:\/\/opensource.microsoft.com\/blog\/wp-content\/uploads\/2018\/04\/vault-aad1-300x180.webp 300w, https:\/\/opensource.microsoft.com\/blog\/wp-content\/uploads\/2018\/04\/vault-aad1-768x460.webp 768w, https:\/\/opensource.microsoft.com\/blog\/wp-content\/uploads\/2018\/04\/vault-aad1-1536x921.webp 1536w, https:\/\/opensource.microsoft.com\/blog\/wp-content\/uploads\/2018\/04\/vault-aad1-330x198.webp 330w, https:\/\/opensource.microsoft.com\/blog\/wp-content\/uploads\/2018\/04\/vault-aad1-800x480.webp 800w, https:\/\/opensource.microsoft.com\/blog\/wp-content\/uploads\/2018\/04\/vault-aad1-400x240.webp 400w, https:\/\/opensource.microsoft.com\/blog\/wp-content\/uploads\/2018\/04\/vault-aad1.webp 1618w\" data-orig-src=\"https:\/\/opensource.microsoft.com\/blog\/wp-content\/uploads\/2018\/04\/vault-aad1-1024x614.webp\"><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"using-aad-authentication-with-vault\">Using AAD Authentication with Vault<\/h2>\n\n\n\n<p>After configuring Vault AAD authentication, services running in Azure can start using Vault to store and retrieve application secrets. Azure services authenticate themselves to Vault via a call to the login API method and passing the required <em><strong>jwt<\/strong> <\/em>and <em><strong>role<\/strong> <\/em>parameters. If you used <em><strong>bound_subscription_id<\/strong><\/em> and <em><strong>bound_resource_groups<\/strong><\/em> parameters during configuration (as in the example above) to further restrict access to Vault information, you must supply those to the login call along with the name of the Virtual Machine. AAD <a href=\"https:\/\/docs.microsoft.com\/en-us\/azure\/active-directory\/managed-service-identity\/tutorial-linux-vm-access-arm\">Managed Service Identity<\/a> provides the <em><strong>jwt<\/strong><\/em> token parameter for services running in Microsoft Cloud. You can obtain subscription id, resource group and other parameters by calling into the <a href=\"https:\/\/docs.microsoft.com\/en-us\/azure\/virtual-machines\/windows\/instance-metadata-service\">Instance Metadata Service<\/a> in Azure.<\/p>\n\n\n\n<p>After logging into Vault, Azure services read and write Vault secrets in the usual manner, using <em><strong>vault write<\/strong> <\/em>and <em><strong>vault read<\/strong> <\/em>commands, as illustrated below.<\/p>\n\n\n<figure class=\"wp-block-image size-large\"><img decoding=\"async\" src=\"https:\/\/opensource.microsoft.com\/blog\/wp-content\/uploads\/2018\/04\/vault-aad3-1024x847.webp\" alt=\"azurevault terminal\" class=\"wp-image-73351 webp-format\" srcset=\"https:\/\/opensource.microsoft.com\/blog\/wp-content\/uploads\/2018\/04\/vault-aad3-1024x847.webp 1024w, https:\/\/opensource.microsoft.com\/blog\/wp-content\/uploads\/2018\/04\/vault-aad3-300x248.webp 300w, https:\/\/opensource.microsoft.com\/blog\/wp-content\/uploads\/2018\/04\/vault-aad3-768x635.webp 768w, https:\/\/opensource.microsoft.com\/blog\/wp-content\/uploads\/2018\/04\/vault-aad3-1536x1270.webp 1536w, https:\/\/opensource.microsoft.com\/blog\/wp-content\/uploads\/2018\/04\/vault-aad3-302x250.webp 302w, https:\/\/opensource.microsoft.com\/blog\/wp-content\/uploads\/2018\/04\/vault-aad3-330x273.webp 330w, https:\/\/opensource.microsoft.com\/blog\/wp-content\/uploads\/2018\/04\/vault-aad3-800x661.webp 800w, https:\/\/opensource.microsoft.com\/blog\/wp-content\/uploads\/2018\/04\/vault-aad3-400x331.webp 400w, https:\/\/opensource.microsoft.com\/blog\/wp-content\/uploads\/2018\/04\/vault-aad3.webp 1824w\" data-orig-src=\"https:\/\/opensource.microsoft.com\/blog\/wp-content\/uploads\/2018\/04\/vault-aad3-1024x847.webp\"><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"to-infinity-and-beyond\">To infinity and beyond<\/h2>\n\n\n\n<p>With AAD authentication integration for Vault now available, applications and services running in Azure can store and access secrets in a secure and scalable way. As an example, virtual machine instances in Virtual Machine Scale Sets in Azure can now let the Vault AAD Authentication handle access to secrets needed for these instances while automatically verifying their identity. This eliminates the need for any human\/process interaction.<\/p>\n\n\n\n<p>This new feature of Vault will allow customers to easily scale services to Azure while allowing them to use the services that they are familiar with, accelerating their cloud adoption efforts.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>As an increasing number of customers move to the cloud, including multi-cloud and hybrid environments, securing infrastructure at scale emerges as one of the key challenges.<\/p>\n","protected":false},"author":5562,"featured_media":73362,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"msxcm_post_with_no_image":false,"ep_exclude_from_search":false,"_classifai_error":"","_classifai_text_to_speech_error":"","footnotes":""},"post_tag":[141,2272,166],"content-type":[361],"topic":[2241,2244,2252],"programming-languages":[],"coauthors":[2327],"class_list":["post-73345","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","tag-hashicorp","tag-microsoft","tag-azure","content-type-project-updates","topic-cloud","topic-devops","topic-tools","review-flag-1593580428-734","review-flag-lever-1593580265-989","review-flag-new-1593580248-669"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.2 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>HashiCorp Vault speaks Azure Active Directory | Microsoft Open Source Blog<\/title>\n<meta name=\"description\" content=\"HashiCorp Vault integration with Azure Active Directory (AAD), available in Vault 0.10, gives you a way to leverage identity information stored in AAD to control access to secrets stored in Vault. This blog post has tips and tricks for running Vault with AAD.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/opensource.microsoft.com\/blog\/2018\/04\/10\/scaling-tips-hashicorp-vault-azure-active-directory\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"HashiCorp Vault speaks Azure Active Directory | Microsoft Open Source Blog\" \/>\n<meta property=\"og:description\" content=\"HashiCorp Vault integration with Azure Active Directory (AAD), available in Vault 0.10, gives you a way to leverage identity information stored in AAD to control access to secrets stored in Vault. This blog post has tips and tricks for running Vault with AAD.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/opensource.microsoft.com\/blog\/2018\/04\/10\/scaling-tips-hashicorp-vault-azure-active-directory\/\" \/>\n<meta property=\"og:site_name\" content=\"Microsoft Open Source Blog\" \/>\n<meta property=\"article:published_time\" content=\"2018-04-10T16:00:40+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-01-24T20:39:29+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/opensource.microsoft.com\/blog\/wp-content\/uploads\/2018\/04\/vault-aad1_featured.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1618\" \/>\n\t<meta property=\"og:image:height\" content=\"483\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Eugene Chuvyrov\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:image\" content=\"https:\/\/open.microsoft.com\/wp-content\/uploads\/2018\/04\/vault-aad1_1000x560.png\" \/>\n<meta name=\"twitter:creator\" content=\"@OpenAtMicrosoft\" \/>\n<meta name=\"twitter:site\" content=\"@OpenAtMicrosoft\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Eugene Chuvyrov\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 min read\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/opensource.microsoft.com\/blog\/2018\/04\/10\/scaling-tips-hashicorp-vault-azure-active-directory\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/opensource.microsoft.com\/blog\/2018\/04\/10\/scaling-tips-hashicorp-vault-azure-active-directory\/\"},\"author\":[{\"@id\":\"https:\/\/opensource.microsoft.com\/blog\/author\/eugene-chuvyrov\/\",\"@type\":\"Person\",\"@name\":\"Eugene Chuvyrov\"}],\"headline\":\"HashiCorp Vault speaks Azure Active Directory\",\"datePublished\":\"2018-04-10T16:00:40+00:00\",\"dateModified\":\"2025-01-24T20:39:29+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/opensource.microsoft.com\/blog\/2018\/04\/10\/scaling-tips-hashicorp-vault-azure-active-directory\/\"},\"wordCount\":534,\"commentCount\":2,\"publisher\":{\"@id\":\"https:\/\/opensource.microsoft.com\/blog\/#organization\"},\"image\":{\"@id\":\"https:\/\/opensource.microsoft.com\/blog\/2018\/04\/10\/scaling-tips-hashicorp-vault-azure-active-directory\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/opensource.microsoft.com\/blog\/wp-content\/uploads\/2018\/04\/vault-aad1_featured.png\",\"keywords\":[\"HashiCorp\",\"Microsoft\",\"Microsoft Azure\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/opensource.microsoft.com\/blog\/2018\/04\/10\/scaling-tips-hashicorp-vault-azure-active-directory\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/opensource.microsoft.com\/blog\/2018\/04\/10\/scaling-tips-hashicorp-vault-azure-active-directory\/\",\"url\":\"https:\/\/opensource.microsoft.com\/blog\/2018\/04\/10\/scaling-tips-hashicorp-vault-azure-active-directory\/\",\"name\":\"HashiCorp Vault speaks Azure Active Directory | Microsoft Open Source Blog\",\"isPartOf\":{\"@id\":\"https:\/\/opensource.microsoft.com\/blog\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/opensource.microsoft.com\/blog\/2018\/04\/10\/scaling-tips-hashicorp-vault-azure-active-directory\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/opensource.microsoft.com\/blog\/2018\/04\/10\/scaling-tips-hashicorp-vault-azure-active-directory\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/opensource.microsoft.com\/blog\/wp-content\/uploads\/2018\/04\/vault-aad1_featured.png\",\"datePublished\":\"2018-04-10T16:00:40+00:00\",\"dateModified\":\"2025-01-24T20:39:29+00:00\",\"description\":\"HashiCorp Vault integration with Azure Active Directory (AAD), available in Vault 0.10, gives you a way to leverage identity information stored in AAD to control access to secrets stored in Vault. This blog post has tips and tricks for running Vault with AAD.\",\"breadcrumb\":{\"@id\":\"https:\/\/opensource.microsoft.com\/blog\/2018\/04\/10\/scaling-tips-hashicorp-vault-azure-active-directory\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/opensource.microsoft.com\/blog\/2018\/04\/10\/scaling-tips-hashicorp-vault-azure-active-directory\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/opensource.microsoft.com\/blog\/2018\/04\/10\/scaling-tips-hashicorp-vault-azure-active-directory\/#primaryimage\",\"url\":\"https:\/\/opensource.microsoft.com\/blog\/wp-content\/uploads\/2018\/04\/vault-aad1_featured.png\",\"contentUrl\":\"https:\/\/opensource.microsoft.com\/blog\/wp-content\/uploads\/2018\/04\/vault-aad1_featured.png\",\"width\":1618,\"height\":483,\"caption\":\"a close up of a screen\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/opensource.microsoft.com\/blog\/2018\/04\/10\/scaling-tips-hashicorp-vault-azure-active-directory\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/opensource.microsoft.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"HashiCorp Vault speaks Azure Active Directory\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/opensource.microsoft.com\/blog\/#website\",\"url\":\"https:\/\/opensource.microsoft.com\/blog\/\",\"name\":\"Microsoft Open Source Blog\",\"description\":\"Open dialogue about openness at Microsoft \u2013 open source, standards, interoperability\",\"publisher\":{\"@id\":\"https:\/\/opensource.microsoft.com\/blog\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/opensource.microsoft.com\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/opensource.microsoft.com\/blog\/#organization\",\"name\":\"Microsoft Open Source Blog\",\"url\":\"https:\/\/opensource.microsoft.com\/blog\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/opensource.microsoft.com\/blog\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/opensource.microsoft.com\/blog\/wp-content\/uploads\/2019\/08\/Microsoft-Logo.png\",\"contentUrl\":\"https:\/\/opensource.microsoft.com\/blog\/wp-content\/uploads\/2019\/08\/Microsoft-Logo.png\",\"width\":259,\"height\":194,\"caption\":\"Microsoft Open Source Blog\"},\"image\":{\"@id\":\"https:\/\/opensource.microsoft.com\/blog\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/x.com\/OpenAtMicrosoft\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"HashiCorp Vault speaks Azure Active Directory | Microsoft Open Source Blog","description":"HashiCorp Vault integration with Azure Active Directory (AAD), available in Vault 0.10, gives you a way to leverage identity information stored in AAD to control access to secrets stored in Vault. This blog post has tips and tricks for running Vault with AAD.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/opensource.microsoft.com\/blog\/2018\/04\/10\/scaling-tips-hashicorp-vault-azure-active-directory\/","og_locale":"en_US","og_type":"article","og_title":"HashiCorp Vault speaks Azure Active Directory | Microsoft Open Source Blog","og_description":"HashiCorp Vault integration with Azure Active Directory (AAD), available in Vault 0.10, gives you a way to leverage identity information stored in AAD to control access to secrets stored in Vault. This blog post has tips and tricks for running Vault with AAD.","og_url":"https:\/\/opensource.microsoft.com\/blog\/2018\/04\/10\/scaling-tips-hashicorp-vault-azure-active-directory\/","og_site_name":"Microsoft Open Source Blog","article_published_time":"2018-04-10T16:00:40+00:00","article_modified_time":"2025-01-24T20:39:29+00:00","og_image":[{"width":1618,"height":483,"url":"https:\/\/opensource.microsoft.com\/blog\/wp-content\/uploads\/2018\/04\/vault-aad1_featured.png","type":"image\/png"}],"author":"Eugene Chuvyrov","twitter_card":"summary_large_image","twitter_image":"https:\/\/open.microsoft.com\/wp-content\/uploads\/2018\/04\/vault-aad1_1000x560.png","twitter_creator":"@OpenAtMicrosoft","twitter_site":"@OpenAtMicrosoft","twitter_misc":{"Written by":"Eugene Chuvyrov","Est. reading time":"2 min read"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/opensource.microsoft.com\/blog\/2018\/04\/10\/scaling-tips-hashicorp-vault-azure-active-directory\/#article","isPartOf":{"@id":"https:\/\/opensource.microsoft.com\/blog\/2018\/04\/10\/scaling-tips-hashicorp-vault-azure-active-directory\/"},"author":[{"@id":"https:\/\/opensource.microsoft.com\/blog\/author\/eugene-chuvyrov\/","@type":"Person","@name":"Eugene Chuvyrov"}],"headline":"HashiCorp Vault speaks Azure Active Directory","datePublished":"2018-04-10T16:00:40+00:00","dateModified":"2025-01-24T20:39:29+00:00","mainEntityOfPage":{"@id":"https:\/\/opensource.microsoft.com\/blog\/2018\/04\/10\/scaling-tips-hashicorp-vault-azure-active-directory\/"},"wordCount":534,"commentCount":2,"publisher":{"@id":"https:\/\/opensource.microsoft.com\/blog\/#organization"},"image":{"@id":"https:\/\/opensource.microsoft.com\/blog\/2018\/04\/10\/scaling-tips-hashicorp-vault-azure-active-directory\/#primaryimage"},"thumbnailUrl":"https:\/\/opensource.microsoft.com\/blog\/wp-content\/uploads\/2018\/04\/vault-aad1_featured.png","keywords":["HashiCorp","Microsoft","Microsoft Azure"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/opensource.microsoft.com\/blog\/2018\/04\/10\/scaling-tips-hashicorp-vault-azure-active-directory\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/opensource.microsoft.com\/blog\/2018\/04\/10\/scaling-tips-hashicorp-vault-azure-active-directory\/","url":"https:\/\/opensource.microsoft.com\/blog\/2018\/04\/10\/scaling-tips-hashicorp-vault-azure-active-directory\/","name":"HashiCorp Vault speaks Azure Active Directory | Microsoft Open Source Blog","isPartOf":{"@id":"https:\/\/opensource.microsoft.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/opensource.microsoft.com\/blog\/2018\/04\/10\/scaling-tips-hashicorp-vault-azure-active-directory\/#primaryimage"},"image":{"@id":"https:\/\/opensource.microsoft.com\/blog\/2018\/04\/10\/scaling-tips-hashicorp-vault-azure-active-directory\/#primaryimage"},"thumbnailUrl":"https:\/\/opensource.microsoft.com\/blog\/wp-content\/uploads\/2018\/04\/vault-aad1_featured.png","datePublished":"2018-04-10T16:00:40+00:00","dateModified":"2025-01-24T20:39:29+00:00","description":"HashiCorp Vault integration with Azure Active Directory (AAD), available in Vault 0.10, gives you a way to leverage identity information stored in AAD to control access to secrets stored in Vault. This blog post has tips and tricks for running Vault with AAD.","breadcrumb":{"@id":"https:\/\/opensource.microsoft.com\/blog\/2018\/04\/10\/scaling-tips-hashicorp-vault-azure-active-directory\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/opensource.microsoft.com\/blog\/2018\/04\/10\/scaling-tips-hashicorp-vault-azure-active-directory\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/opensource.microsoft.com\/blog\/2018\/04\/10\/scaling-tips-hashicorp-vault-azure-active-directory\/#primaryimage","url":"https:\/\/opensource.microsoft.com\/blog\/wp-content\/uploads\/2018\/04\/vault-aad1_featured.png","contentUrl":"https:\/\/opensource.microsoft.com\/blog\/wp-content\/uploads\/2018\/04\/vault-aad1_featured.png","width":1618,"height":483,"caption":"a close up of a screen"},{"@type":"BreadcrumbList","@id":"https:\/\/opensource.microsoft.com\/blog\/2018\/04\/10\/scaling-tips-hashicorp-vault-azure-active-directory\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/opensource.microsoft.com\/blog\/"},{"@type":"ListItem","position":2,"name":"HashiCorp Vault speaks Azure Active Directory"}]},{"@type":"WebSite","@id":"https:\/\/opensource.microsoft.com\/blog\/#website","url":"https:\/\/opensource.microsoft.com\/blog\/","name":"Microsoft Open Source Blog","description":"Open dialogue about openness at Microsoft \u2013 open source, standards, interoperability","publisher":{"@id":"https:\/\/opensource.microsoft.com\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/opensource.microsoft.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/opensource.microsoft.com\/blog\/#organization","name":"Microsoft Open Source Blog","url":"https:\/\/opensource.microsoft.com\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/opensource.microsoft.com\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/opensource.microsoft.com\/blog\/wp-content\/uploads\/2019\/08\/Microsoft-Logo.png","contentUrl":"https:\/\/opensource.microsoft.com\/blog\/wp-content\/uploads\/2019\/08\/Microsoft-Logo.png","width":259,"height":194,"caption":"Microsoft Open Source Blog"},"image":{"@id":"https:\/\/opensource.microsoft.com\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/OpenAtMicrosoft"]}]}},"msxcm_display_generated_audio":false,"msxcm_animated_featured_image":null,"distributor_meta":false,"distributor_terms":false,"distributor_media":false,"distributor_original_site_name":"Microsoft Open Source Blog","distributor_original_site_url":"https:\/\/opensource.microsoft.com\/blog","push-errors":false,"_links":{"self":[{"href":"https:\/\/opensource.microsoft.com\/blog\/wp-json\/wp\/v2\/posts\/73345","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/opensource.microsoft.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/opensource.microsoft.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/opensource.microsoft.com\/blog\/wp-json\/wp\/v2\/users\/5562"}],"replies":[{"embeddable":true,"href":"https:\/\/opensource.microsoft.com\/blog\/wp-json\/wp\/v2\/comments?post=73345"}],"version-history":[{"count":2,"href":"https:\/\/opensource.microsoft.com\/blog\/wp-json\/wp\/v2\/posts\/73345\/revisions"}],"predecessor-version":[{"id":97007,"href":"https:\/\/opensource.microsoft.com\/blog\/wp-json\/wp\/v2\/posts\/73345\/revisions\/97007"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/opensource.microsoft.com\/blog\/wp-json\/wp\/v2\/media\/73362"}],"wp:attachment":[{"href":"https:\/\/opensource.microsoft.com\/blog\/wp-json\/wp\/v2\/media?parent=73345"}],"wp:term":[{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/opensource.microsoft.com\/blog\/wp-json\/wp\/v2\/post_tag?post=73345"},{"taxonomy":"content-type","embeddable":true,"href":"https:\/\/opensource.microsoft.com\/blog\/wp-json\/wp\/v2\/content-type?post=73345"},{"taxonomy":"topic","embeddable":true,"href":"https:\/\/opensource.microsoft.com\/blog\/wp-json\/wp\/v2\/topic?post=73345"},{"taxonomy":"programming-languages","embeddable":true,"href":"https:\/\/opensource.microsoft.com\/blog\/wp-json\/wp\/v2\/programming-languages?post=73345"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/opensource.microsoft.com\/blog\/wp-json\/wp\/v2\/coauthors?post=73345"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}