Azure Licensing Manager uses the Azure AD SCIM Microservice to make API calls to your Azure tenant in response to your actions in EmpowerID. As part of the deployment process for the microservice, an app service needs to be created to host the microservice and configured for Azure AD authentication.
To create an App Service for the SCIM Microservice
Log in to your Azure portal as a user with the necessary permissions to create an App Service.
In Azure, navigate to All Services > App Services and create a new App service.
Under Project Details, select a Subscription and then create a Resource Group for the App Service.
Under Instance Details, enter the following information:
Name — Enter a name for the app service
Publish — Select Code
Runtime Stack — Select .NET Core 3.1 (LTS)
Operating System — Select Linux
Region — Select the appropriate region
Click Review + Create.
Click Create.
After the deployment of the App Service completes, click Go to resource.
On the Overview page, copy and save the URL for the app service. You will need this later.
Change the platform for the App Service to 64 Bit by doing the following:
On the App Service navbar, under Settings, click Configuration.
On the Configuration blade, select the General settings tab.
Under Platform settings, change the Platform to 64 Bit and click Save.
Configure authentication
Navigate to the Authentication (classic) blade for the app service.
Turn on App Service Authentication.
For Action to take when request is not authenticated, select Log in with Azure Active Directory.
For Authentication Providers, select Azure Active Directory.
Set the Management mode to Express and select the service principal you created to provide Azure AD authentication for the microservice.
Save your changes.
Create a managed identity for the app service
Navigate to the Identity blade for the app service.
Turn on System assigned to create the managed identity.
Save your changes.
IN THIS ARTICLE