Back to Integrations
OIDC with Azure
Authenticate env zero deployments to Azure with short-lived OIDC tokens instead of stored client secrets
Integration
category
Identity and Access Management
Overview
Use OpenID Connect so env zero deployments authenticate to Azure without a long-lived client secret. Each deployment gets a short-lived token that Microsoft Entra ID exchanges for access, and it expires when the run ends.
How it works
Create an app registration in Entra ID and add a federated credential that trusts env zero's OIDC issuer. At deploy time env zero presents a signed token, Azure exchanges it for temporary access, and no secret is ever stored.
%25203.svg)
%25202%2520(6).svg)
%25202%2520(2).svg)
%25202%2520(7).svg)
%25203%2520(1).svg)
.svg)
%25202%2520(8).svg)
