...
...
...
key vault and click Generate/Import.
Enter a Certificate Name and Subject and then click Create.
After Azure creates the certificate, click the record for it and then download the certificate in CER format. You will add this to the service principal you created for the Exchange Online app service.
Add an access policy
Navigate to the Access policies blade for the key vault.
Click + Add Access Policy.
...
Click the
...
...
...
...
...
Under Select principal, click None Selected.
...
Search for and select the Managed Identity for the Exchange Online App Service. Please note that the Managed Identity you select is the System Assigned Managed Identity you
...
Click Select to select the principal.
On the Add access policy blade, click Add.
...
...
On the navbar for the Key Vault, under Settings, click Secrets.
...
On the Secrets page, click Generate/Import.
...
On the Create a secret blade, do the following to create the first secret:
...
Name – Enter EIDExchangeAdminUser.
...
Click Create.
...
...
Back on the Secrets blade, click Generate/Import again.
...
On the Create a secret blade, do the following to create the second secret:
Name — Enter EIDExchangeUserPassword.
Value — Secret values should follow username:password format, such as eiduser@<YourAzureTenant>:TestPass123.
Click Create.
...
Back on the Secrets blade, click the record for the Exchange Admin User secret.
...
...
Click the Current Version to go to the Properties blade for the secret.
...
...
On the Properties blade, copy the Secret Identifier. You will use this value later.
...
...
Return to the Secrets blade and repeat steps 16, 17 and 18 for the Exchange User Password secret.
...
Navigate to the Exchange Online App Service you created earlier.
...
On the navbar for the App Service, under Settings, click Configuration.
...
Under Application settings, click New application setting.
...
...
In the Add/Edit application setting pane, do the following:
Name – Enter the name you gave the to the first secret.
Value – Enter @Microsoft.KeyVault(SecretUri={The_Secret_Identifier_For_The_Exchange_Admin_Secret}), replacing {The_Secret_Identifier_For_The_Exchange_Admin_Secret} with the actual Secret Identifier for the secret.
Click OK.
...
Back in the Application settings tab of the Configuration blade, click New Application setting.
...
In the Add/Edit application setting pane, do the following:
Name – Enter the name you gave the to the second secret.
Value – Enter @Microsoft.KeyVault(SecretUri={The_Secret_Identifier_For_The_Exchange_User_Password_Secret}), replacing {The_Secret_Identifier_For_The_Exchange_User_Password_Secret} with the actual Secret Identifier for the secret.
Click OK.
...
Click Save on the Configuration blade.
...
Click Continue to confirm that you want to save changes.
...
| Div | ||||||||
|---|---|---|---|---|---|---|---|---|
| ||||||||
IN THIS ARTICLE
|
| Insert excerpt | ||||||
|---|---|---|---|---|---|---|
|