Integration of Azure AD with Hashicorp Vault

[jeffsanicola]

I think the OIDC auth method would be a better fit for your use case.

Overview:

JWT/OIDC - Auth Methods | Vault | HashiCorp Developer

Azure AD specific settings:
https://www.vaultproject.io/docs/auth/jwt/oidc_providers#azure-active-directory-aad

Recent post about some configuration specifics that may be useful:

Azure OIDC setup

Hi, I am trying to setup Azure OIDC authentication with Vault. I am following this guide Azure Active Directory with OIDC Auth Method and External Groups | Vault - HashiCorp Learn . Aside GroupMember.Read.All, what other permissions do I need for the setup. When I run the command below, I get an ‘insufficient permissions error’ az ad app permission add \ --id ${AD_VAULT_APP_ID} \ --api ${AD_MICROSOFT_GRAPH_API_ID} \ --api-permissions ${AD_PERMISSION_GROUP_MEMBER_READ_ALL_ID}=Scope I …