How to access azure global resources from azure china cloud

Firdos Khan 0

I am looking a solution for

how to access azure global resources from azure China cloud. Outlook-lgo202n0

As of now we are using service principle solution to access resources from azure global but as it is rely on password so that reason we want another solution to access azure global access from azure China.

Ganesh Patapati (Quadrant Resource LLC) 175 Reputation points Microsoft Vendor

2024-08-20T10:09:10.7633333+00:00

Hi @firdos khan,

Just checking in to see if you have got a chance to see the answer posted by Marcin Policht in resolving the issue.

If it was helpful, please click "Upvote and Accept Answer" on this post to let us know.

We're here to help, so if you have any further questions, don't hesitate to ask.

Thank You.
Ganesh Patapati (Quadrant Resource LLC) 175 Reputation points Microsoft Vendor

2024-08-21T14:44:34.3466667+00:00

Hi Firdos Khan,

I wanted to check if you had the opportunity to review the answer posted by Marcin Policht useful in resolving your issue.

If it was helpful, please click "Upvote and Accept Answer" on his post to let us know.

We're here to help, so if you have any further questions, don't hesitate to ask.

Thank You.
Firdos Khan 0 Reputation points

2024-08-28T05:08:24.3566667+00:00

Hello , As of now I am looking into another solution(FIC (federated identity credential)) for the same as per my organization suggestion, I sent approach which is post Marcin Policht to my organization but still i didn't get green flag to work on it

1 answer

Marcin Policht 21,980 Reputation points MVP

2024-08-07T11:38:29.7333333+00:00

As per https://learn.microsoft.com/en-us/azure/china/resources-faq

Can I connect between Azure global regions and Azure in China regions?

Azure global regions and Azure in China regions are physically disconnected. However, you can still connect subscriptions in Azure in China and Azure global regions through composite VPN site-to-site or ExpressRoute. You connect the subscription in the Azure in China region with your on-premises site, and connect your on-premises site to your subscription in the Azure global region.

If the above response helps answer your question, remember to "Accept Answer" so that others in the community facing similar issues can easily find the solution. Your contribution is highly appreciated.

hth

Marcin
Please sign in to rate this answer.
Firdos Khan 0 Reputation points

2024-08-28T05:27:46.0866667+00:00

Hello @Marcin Policht Thank you for your valuable input regarding our issue. My organization has considered your suggestions as a potential solution, though we have yet to fully implement them.

Currently, we are focusing on resolving the issue using Federated Identity Credential (FIC). We have followed the documentation to configure and deploy the solution both in Azure Global and Azure China app services. While the setup works as expected in Azure Global, we are encountering issues in Azure China.

Specifically, we are receiving the following exception when trying to connect to Azure Key Vault (in Azure Global) from an Azure China app service. We are actively investigating the issue and would appreciate any further guidance or insights.

Exception : ManagedIdentityCredential authentication unavailable. Multiple attempts failed to obtain a token from the managed identity endpoint.

Thank you for your assistance.

Ganesh Patapati (Quadrant Resource LLC) 175 Reputation points Microsoft Vendor

2024-08-28T11:03:33.7066667+00:00

Hi Firdos Khan

From the initial verbatim, this looked like you were facing issues with Networking side, which I believe was addressed by Marcin Policht.

For queries related to Entra, please create a new thread with "Microsoft Entra ID" only so that community members with expertise over Entra can assist you better.

Regards,

Ganesh

Ganesh Patapati (Quadrant Resource LLC) 175 Reputation points Microsoft Vendor

2024-08-29T19:34:27.06+00:00

Hi Firdos Khan,

Greetings of the day!!

I would like to follow up with the thread.

Could you please able to look into my comment above and please share the link of the new thread you have posted, so that it can help the community member.

Regards,

Ganesh
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

How to access azure global resources from azure china cloud

1 answer

Your answer