Question

Difficulty: MediumProvision and Configure Azure API Management

You need to enable Microsoft Entra ID (formerly Azure Active Directory) authentication for the developer portal of an existing Azure API Management (APIM) instance. Which sequence of actions should you perform to complete the configuration? To answer, drag all actions from the list of actions to the answer area and arrange them in the correct order.

  1. 1Register an application in Microsoft Entra ID and configure the redirect URI to point to the developer portal.
  2. 2Generate a client secret in the Microsoft Entra ID application registration.
  3. 3Navigate to the API Management resource in the Azure portal and open the Identities blade under the Developer portal section.
  4. 4Add Microsoft Entra ID as an identity provider, and configure it using the Client ID, Tenant ID, and Client Secret.
  5. 5Publish the Developer Portal from the Portal overview or operations blade.

Answer

Register the application in Microsoft Entra ID with the redirect URI, generate a client secret, navigate to the Identities blade in the API Management resource, add Microsoft Entra ID as an identity provider with the application details, and publish the Developer Portal.
To enable Microsoft Entra ID authentication for the developer portal, you must first register an application in Microsoft Entra ID to obtain the Client ID and set up a client secret. This allows secure integration between API Management and Entra ID. Next, you navigate to the Identities blade under the Developer portal section of the API Management instance in the Azure portal and configure the Microsoft Entra ID identity provider using the registered credentials. Finally, the developer portal must be published for the sign-in option to become active and visible to users.

Step-by-Step Solution

1
Register the application in Microsoft Entra ID
An application registration is created with a Redirect URI matching the developer portal's callback endpoint.
Microsoft Entra ID needs to know about the developer portal app to authenticate users and redirect them back securely.
2
Generate a client secret
A client secret value is generated for the registered application.
API Management requires a credential (client secret) to securely establish a trust relationship and communicate with Microsoft Entra ID.
3
Navigate to Identities in API Management
The Identities configuration panel for the developer portal is opened in the Azure portal.
This is the location where identity providers for the developer portal are managed.
4
Add and configure Microsoft Entra ID provider
The identity provider configuration is saved with the Client ID, Tenant ID, and Client Secret.
This registers Microsoft Entra ID as an active authentication option for developer portal users.
5
Publish the Developer Portal
The developer portal is rebuilt and redeployed to its hosting endpoint.
Developer portal customizations, including changes to identity providers, do not take effect for users until the portal is published.

Key Concept

Configuring identity providers and authentication for the Azure API Management developer portal.
Rate this question