Page Comparison

...

You can also register a service principal using the Azure CLI or PowerShell. If you choose to use the CLI or PowerShell, refer to the Microsoft documentation for information about the Azure authentication mechanism and how to create a service principal with Azure Resource Manager, available at https://azure.microsoft.com/en-us/documentation/articles/resource-group-authenticate-service-principal/#authenticate-service-principal-with-password---azure-cli.

If you choose to use the Azure portal to register a service principal, you may still need to use the Azure CLI or PowerShell to customize the access scope for the newly created service principal. The default access scope is the subscription scope that is associated with the user who creates the service principal.

...

1. In the Microsoft Azure portal, click All Services.
2. Search for “Microsoft Entra ID” and click to open Microsoft Entra ID to open it.
3. Click App Registrations in the left panel.
4. In the App registrations panel, either select an existing discovery application or click + New registration to add a new application.
   
   
   

5. If you are adding a new application, enter the following details to define your application in the the  Register an application wizard to define your application, and then click Register to add the application:
   — Name: Enter the name of your new application.
   — Supported account types: Select the account type.
   — Redirect URI: Ensure that you use a unique URL for sign-on purposes.
   Azure notifies you when the application is successfully created.
   Image RemovedImage Added
   
   Note:
   To obtain token information for the endpoints, click the Endpoints icon next to + New registration in the App registration panel. Azure displays the Endpoints page that contains endpoint information for the discovery application. vDiscovery uses the OAuth 2.0 token endpoint (v1). Copy the link from the table and use it to define the vDiscovery endpoint in NIOS. The token corresponds to the Service Endpoint field in NIOS. For more information, refer to the Infoblox NIOS Documentation.

   Image Removed

   
   

   Image Added
   
   

6. Select and click the application from the list. The Azure portal to display its details.
   The Overview page displays details about your application, such as Display name, Application ID, Directory ID, and Object ID. Click API permissions in the left panel, and then click + Add a permission in the API Permissions panel.
   Ensure that you copy Copy the Application ID and save this value it for future use. This ID is used as the Client ID in your vDiscovery configuration.

   
   

7. Click API permissions in the left panel, and then click + Add a permission in the API Permissions panel.

   Image RemovedImage Added

   
   

8. In the Request API permissions panel, click APIs my organization uses.

9. Select Windows Azure Service Management API from the list.
   Image RemovedImage Added
   
   

10. Select Delegated permissions and  and the Access Azure Service Management as organization users (preview) checkbox, and then click Add permission permissions.

    Image RemovedImage Added
    
    

11. In the left panel, click Certificates & secrets, and then click + New client secret:
    In the Add a client secret wizard, complete the following and click Add:
    — Description: Enter a name or description for the generated key.
    — Expires: Select expiry time From the drop-down list, select an expiry for the generated key.
    — Value: The key will be displayed here after you select the expiry time and save the configurationDetails of the client secret is displayed in the Client secrets section. The generated key is displayed in the Value field. It corresponds to the Client Secret in NIOS when you configure vDiscovery jobs.
    
    Important:
    Click the Copy to clipboard icon to copy the key in the Value field at the time of creation and field and save it for your vDiscovery jobs.
    The key value is displayed only at the time of the creation of the client secret. You will not be able to retrieve the value key after you leave the page. The value corresponds to the Client Secret in NIOS when you configure vDiscovery jobs.Image Removed
    
    

12. Validate all the configuration and information on this page.
    Note that the vDiscovery in Azure is performed on the whole subscription, or resource groups linked to the application.

    • Subscription: All entities within the subscription will be discovered including the VMs, network interfaces, and VNets.
    • Resource group: All entities within the specified resource groups will be discovered including the VMs, network interfaces, and VNets. If the discovery of all entities within a subscription is not desired, additional granularity in vDiscovery can be achieved by individually allotting permissions to a resource group.
13. Perform the vDiscovery on Subscription or Resource group linked to your Azure application.
    
    1. To perform vDiscovery for resources on Subscription you need to perform in a subscription, perform the following:
       1. Navigate to All services -> Subscriptions.Image Removed
          
       2. Click on the name for of your subscription to display its details.
          Image Removed
          
          
       3. Click In the left panel, click Access control (IAM).
          
          
          
       4. Click Add > Add role assignment.
          Image Removed
          
          
    2. To perform vDiscovery for resources on Resource group you need to perform in a resource group, complete the following:
       
       1. Navigate to All services -> Resource groups.
          Image Removed
          Click on
          
       2. On the Resource groups page, click the name for your Resource groups.
          Image Removed
          Click of your resource group to display its details.
          
          
       3. In the left panel, click Access control (IAM).
          
          
          
       4. Click Add > Add
          Image Removed
          
    Expand the
    1. 1. role assignment.
          
          
14. In the Add role assignment wizard, select Reader in the Role drop-down menu and select Readerlist.
15. In the Select box, type the name for of your registered app, or locate and select it in the Selected members list.
16. Click Save. You have completed the vDiscovery configuration in Azure.

...

• Token Endpoint: This corresponds to the Service Endpoint field in NIOS. vDiscovery uses the OAUTH 2.0 TOKEN ENDPOINT (v1), however, OAUTH 2.0 TOKEN ENDPOINT (v2) is not supported. You can copy this from the Endpoints panel.
• Application ID: This corresponds to the Client ID when you configure the information of an end point information in NIOS.
• Key: Copy the key from the Keys panel and use that for the Client Secret field in NIOS.
  
  The following describes the corresponding fields for Azure and NIOS when you configure vDiscovery job properties:
  

...