Setting up the Vault

To securely store and access secrets for the EmpowerID bot, we will use the Azure Key Vault. You can set up the vault, provide access, enable System-managed Identity, and set permissions by following these steps.

1. Navigate to the Azure portal.

2. Please create a new Azure Key Vault in azure if one already does not exist.

3. After you create the resource, you can find the Vault URL. Set the KeyVaultUrl to the Azure Vault URL in the App Service application settings of the Web App created in Step #1 https://dotnetworkflow.jira.com/wiki/spaces/EAGV23R3/pages/3160925057
   
   

   Open

   

    

   Open

   

    

4. Enable System-managed Identity on the App Service. Navigate to the web app created in step #1, Select Identity, and switch Status to On within the System assigned tab. Click Save.
   
   

    

    

5. Add an Access Policy to give the System-managed Identity permission to access the vault.
   
   
   

    

6. Choose Get, List, Set, Delete & Recover rights for the secret permissions for the access policy. And Choose Get, List for certificate permission. Click on save to store the permissions.
   
   
   

   
   
   

   
   Please select the app service you have created in step #1 https://dotnetworkflow.jira.com/wiki/spaces/EAGV23R3/pages/3160925057 as the Principal input.