Azure Admin¶

Deprecated. Azure Admin is replaced by the Azure Entra Id connector, which covers everything Azure Admin did (certificates, secrets, directory synchronisation) and much more. Please create new instances with Azure Entra Id. Existing Azure Admin instances keep working for now but will no longer receive updates.

Azure Admin is a management interface that allows administrators to oversee and manage their Azure resources. It provides essential tools for handling tasks such as managing user accounts, syncing directories, and securing applications with certificates and secrets.

The Azure Admin application allows you to retrieve and manage various administrative tasks and settings related to your Azure environment.

Options

Name*: Just a simple label to find it easier in the SenHub's interface.
Description: Description for your own usage only.
Vault*: Choose in the list box the appropriate vault for this resource.
Group: optional — assign this instance to a group to organise it within SenHub.
Tenant Name*: The name of the Azure tenant you wish to manage. This is typically the domain name associated with your Azure Active Directory.
Item Type*: The type of administrative task you want to perform. Currently only one option is available:
- Application Certs & Secrets — Monitor the expiry of application certificates and secrets in your Azure tenant.
Application type: Whether to inspect a Registered app or an Enterprise app*.
Filter: For an Enterprise app, restrict the scope — None (all apps), SAML (SAML token-signing apps only), or Application name (a single named app).
Application name*: The display name of the application to inspect (used by Registered app and by the Application name filter).

Example output

The connector monitors the expiry of Azure application certificates and secrets, and its channels depend on the selected application type and filter.

For a Registered app, it returns one channel per credential, with the number of days remaining before expiry:

{
  "metrics": [
    { "channel": "Client secret", "value": 87, "unit": "days" },
    { "channel": "Signing certificate", "value": 210, "unit": "days" }
  ],
  "message": "Metrics successfully retrieved.",
  "status": "OK",
  "date": 1725981405127
}

For an Enterprise app with no filter (or the SAML filter), it returns aggregate counts plus the list of applications holding expired keys:

{
  "metrics": [
    { "channel": "Total keys", "value": 42, "unit": "#" },
    { "channel": "Expired keys", "value": 3, "unit": "#" },
    { "channel": "Apps with expired keys", "value": "Example App A Example App B ", "unit": "#" }
  ],
  "message": "Metrics successfully retrieved.",
  "status": "OK",
  "date": 1725981405127
}

For an Enterprise app filtered by application name, it returns one channel per key of that app, labelled <name> [<usage>], with the days remaining:

{
  "metrics": [
    { "channel": "Token signing [Sign]", "value": 180, "unit": "days" },
    { "channel": "Token verification [Verify]", "value": 180, "unit": "days" }
  ],
  "message": "Metrics successfully retrieved.",
  "status": "OK",
  "date": 1725981405127
}