Creating a service principal for use with Microsoft Purview

You can create a new or use an existing service principal in your Microsoft Entra tenant to use to authenticate with other services.

App registration

1. Navigate to the Azure portal.

2. Select Microsoft Entra ID from the left-hand side menu.

   

3. Select App registrations and + New registration.

   

4. Enter a name for the application (the service principal name).

5. Select Accounts in this organizational directory only.

6. For Redirect URI select Web and enter any URL you want. If you have an authentication endpoint for your organization you want to use, this is the place. Otherwise https://example.com/auth will do.

7. Then select Register.

   

8. Copy the Application (client) ID value. We'll use this later to create a credential in Microsoft Purview.

   

Adding a secret to the client credentials

1. Select the app from the App registrations.

   

2. Select Add a certificate or secret.

   

3. Select + New client secret under Client secrets.

   

4. Provide a Description and set the Expires for the secret.

   

5. Copy the value of the Secret value. We'll use this later to create a secret in Azure Key Vault.

   

Adding the secret to your Azure Key Vault

To allow Microsoft Purview to use this service principal to authenticate with other services, you'll need to store this credential in Azure Key Vault.

• If you need an Azure Key vault, you can follow these steps to create one.
• To grant your Microsoft Purview account access to the Azure Key Vault, you can follow these steps.

1. Navigate to your Key vault.

   

2. Select Settings --> Secrets --> + Generate/Import

   

3. Enter the Name of your choice, and save it to create a credential in Microsoft Purview.

4. Enter the Value as the Secret value from your Service Principal.

   

5. Select Create to complete.

Create a credential for your secret in Microsoft Purview

To enable Microsoft Purview to use this service principal to authenticate with other services, you'll need to follow these three steps.

1. Connect your Azure Key Vault to Microsoft Purview
2. Grant your service principal authentication on your source - Follow instructions on each source page to grant appropriate authentication.
3. Create a new credential in Microsoft Purview - You'll use the service principal's application (client) ID and the name of the secret you created in your Azure Key Vault.