> ## Documentation Index
> Fetch the complete documentation index at: https://docs.sync.cdata.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Connecting to Azure Blob Storage

In CData Sync, you can connect to Azure Blob Storage in several ways. Select your authentication method below, then proceed to the relevant section and follow those instructions.

* [**Azure Active Directory**](#azure-active-directory)
* [**Azure Managed Service Identity**](#azure-managed-service-identity)
* [**Azure Service Principal**](#azure-service-principal)
* [**Azure Service Principal Certificate**](#azure-service-principal-certificate)
* [**Azure Access Key**](#azure-access-key)
* [**Azure Shared Access Signature**](#azure-shared-access-signature)

### Azure Active Directory

To connect with an Azure Active Directory (AD) user account, select **AzureAD**
for **Auth Scheme**. CData Sync provides an embedded OAuth application with
which to connect, so no additional properties are required.

After you complete this section, go to *Complete Your Connection* on the connection page to finish setting up the connection.

### Azure Managed Service Identity

To leverage Azure Managed Service Identity (MSI) when CData Sync is running on an Azure
virtual machine, select **Azure MSI** for **Auth Scheme**. No
additional properties are required.

After you complete this section, go to *Complete Your Connection* on the connection page to finish setting up the connection.

### Azure Service Principal

To connect with an Azure service principal and client secret, set the following properties:

<ul><li>**Auth Scheme:** Select **AzureServicePrincipal**.</li>
<li>**Azure Tenant:** Enter the Microsoft Online tenant to which you want to connect.</li>
<li>**OAuth Client Id:** Enter the client Id that you were assigned when you registered your application with an OAuth authorization server.</li>
<li>**OAuth Client Secret:** Enter the client secret that you were assigned when you registered your application with an OAuth authorization server.</li></ul>

To obtain the OAuth client Id and client secret for your application:

<ol><li>Log in to the [Azure portal](https://portal.azure.com).</li>
<li>In the left navigation pane, select **All services**. Then, search for and select **App registrations**.</li>
<li>Click **New registrations**.</li>
<li>Enter an application name and select **Any Azure AD Directory - Multi Tenant**.</li>
<li>After you create the application, copy the application (client) Id value that is displayed in the **Overview** section. Use this value as the OAuth client Id.</li>
<li>Navigate to the **Certificates & Secrets** section and select **New Client Secret** for the application.</li>
<li>Specify the duration and save the client secret. After you save it, the key value is displayed.</li>
<li>Copy this value because it is displayed only once. You will use this value as the OAuth client secret.</li>
<li>On the **Authentication** tab, make sure to select **Access tokens (used for implicit flows)**.</li></ol>

After you complete this section, go to *Complete Your Connection* on the connection page to finish setting up the connection.

### Azure Service Principal Certificate

To connect with an Azure service principal and client certificate, set the following properties:

<ul><li>**Auth Scheme:** Select **AzureServicePrincipalCert**.</li>
<li>**Azure Tenant:** Enter the Microsoft Online tenant to which you want to connect.</li>
<li>**OAuth Client Id:** Enter the client Id that you were assigned when you registered your application with an OAuth authorization server.</li>
<li>**OAuth JWT Cert:** Enter your Java web tokens (JWT) certificate store.</li>
<li>**OAuth JWT Cert Type:** Enter the type of key store that contains your JWT Certificate. The default type is **PEMKEY\_BLOB**.</li>
<li>(Optional) **OAuth JWT Cert Password:** Enter the password for your OAuth JWT certificate.</li>
<li>(Optional) **OAuth JWT Cert Subject:** Enter the subject of your OAuth JWT certificate.</li></ul>

To obtain the OAuth certificate for your application:

<ol><li>Log in to the [Azure portal](https://portal.azure.com).</li>
<li>In the left navigation pane, select **All services**. Then, search for and select **App registrations**.</li>
<li>Click **New registrations**.</li>
<li>Enter an application name and select **Any Azure AD Directory - Multi Tenant**.</li>
<li>After you create the application, copy the application (client) Id value that is displayed in the **Overview** section. Use this value as the OAuth client Id.</li>
<li>Navigate to the **Certificates & Secrets** section and select **Upload certificate**. Then, select the certificate to upload from your local machine.</li>
<li>Specify the duration and save the client secret. After you save it, the key value is displayed.</li>
<li>Copy this value because it is displayed only once. You will use this value as the OAuth client secret.</li>
<li>On the **Authentication** tab, make sure to select **Access tokens (used for implicit flows)**.</li></ol>

After you complete this section, go to *Complete Your Connection* on the connection page to finish setting up the connection.

### Azure Access Key

To connect with an Azure access key, set the following properties:

<ul><li>**Auth Scheme:** Select **Access Key**.</li>
<li>**Azure Access Key:** Enter the access key that is associated with your storage account.</li></ul>

To retrieve your access key:

<ol><li>Sign in to the [Azure portal](https://portal.azure.com/) with the credentials for your root account.</li>
<li>Click **Storage accounts** and select the storage account that you want to use.</li>
<li>Under **Settings**, click **Access keys**. Your storage account name and key are displayed on that page.</li></ol>

After you complete this section, go to *Complete Your Connection* on the connection page to finish setting up the connection.

### Azure Shared Access Signature

To connect with an Azure shared access signature, set the following properties:

<ul><li>**Auth Scheme:** Select **AzureStorageSAS**.</li>
<li>**Azure Shared Access Signature:** Enter the shared access signature that is associated with the storage account.</li></ul>

To create an Azure shared access signature:

<ol><li>Sign in to the [Azure portal](https://portal.azure.com) with the credentials for your root account.</li>
<li>Click **Storage accounts** and select the storage account you want to use.</li>
<li>Under **Settings**, click **Shared Access Signature**.</li>
<li>Set the permissions and a date when the token will expire.</li>
<li>Click **Generate SAS** and copy the token that is generated.</li></ol>

After you complete this section, go to *Complete Your Connection* on the connection page to finish setting up the connection.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.