How do I use the built-in authentication features for a self-hosted container?

Andre Freitas 0

I have been using the Azure Document Intelligence service to detect document layout but I need to use the deployable container version that will be hosted in my own datacenter. I would like to make use of the authentication features described here: https://learn.microsoft.com/en-us/azure/ai-services/authentication?view=doc-intel-4.0.0 to authenticate and validate any requests coming into the self-host container. Is there a way to do that? If so how do I managed the credentials? I couldn't find the documentation necessary for this, am I wrong in thinking that that feature can only be used if the service is hosted with Azure?

Thanks

romungi-MSFT 42,761 Reputation points Microsoft Employee

2024-05-08T08:14:29.9033333+00:00

@Andre Freitas Yes, the SP and MI authentication will work for the Azure hosted endpoints. For container scenarios, for a self hosted container, you can use key vault to retrieve the details and then send a request for analyze operation to the cloud endpoint.

If you want to use containers, you could apply for disconnected containers and setup your container without the need to call the cloud endpoint.
Andre Freitas 0 Reputation points

2024-05-08T13:51:51.28+00:00

@romungi-MSFT I'm glad to hear that. I have been using this link https://learn.microsoft.com/en-gb/azure/ai-services/document-intelligence/containers/install-run?view=doc-intel-3.0.0&tabs=layout to guide me on how to use the container. When I open the swagger documentation or this https://westus.dev.cognitive.microsoft.com/docs/services/form-recognizer-api-2022-08-31/operations/AnalyzeDocument I don't see any reference on how to sent credentials to the requests. Also on this page https://learn.microsoft.com/en-gb/azure/ai-services/document-intelligence/containers/configuration?view=doc-intel-3.0.0 I can't find a way to configure the container to request credentials in order to accept the requests.

My goal is to have a java application call the container on https://localhost/formrecognizer/documentModels/{modelId}:analyze?api-version=2022-08-31[&pages][&locale][&stringIndexType] and only accept if the request carries a bearer token in the header.

Thanks for the help

Share via

How do I use the built-in authentication features for a self-hosted container?