# Azure Authentication

Azure authentication is a security feature that allows users to log into a system using their Microsoft Azure credentials.

Astera Data Stack leverages this authentication method and provides the option to register new users using Azure authentication through its Server Browser interface.

## **Configuring Azure Authentication Credentials**

1. Go to *Server > Cluster > Cluster Settings*

<figure><img src="https://3083465318-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FsR50Wa7EwZGlmPSAMkkf%2Fuploads%2Fs3LC5CG59gb6v9V3Hm9R%2FClusterSettings.png?alt=media&#x26;token=5079dac3-d2e9-4234-b431-af99a225236a" alt=""><figcaption></figcaption></figure>

2. Click on Authentication mode tab and select Azure Authentication from dropdown
3. Provide a valid *Client Id, Redirect URI* and *Account type*.

{% hint style="info" %}
**Note:** You can find your *Client ID, Redirect URI* and *Account Type* in you Azure Portal.
{% endhint %}

![](https://3083465318-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FsR50Wa7EwZGlmPSAMkkf%2Fuploads%2FhYqPFPMTQU2WyBN92Fl4%2F0.png?alt=media)

## **Registering user using Azure Authentication**

1. After Configuring Azure Credentials, navigate to *Server Browser* tool window by pressing ctrl + alt + &#x42;*.*
2. Here, in *Security > User*, right-click on *User* and select **Register User**

![](https://3083465318-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FsR50Wa7EwZGlmPSAMkkf%2Fuploads%2FZrwHvCHRBWXBJnb8DiAS%2F1.png?alt=media)

3. A *Register User* window will open, in the *Registration* drop-down select **Azure Authentication**

![](https://3083465318-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FsR50Wa7EwZGlmPSAMkkf%2Fuploads%2FKsRpLjJdz3IjaDSH9hNx%2F2.png?alt=media)

4. Once selected, Astera will start retrieving a list of users.

![](https://3083465318-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FsR50Wa7EwZGlmPSAMkkf%2Fuploads%2F3BkpWECUubRsrsNCxvh1%2F3.png?alt=media)

5. Once the users have been retrieved, a search UI will appear.

![](https://3083465318-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FsR50Wa7EwZGlmPSAMkkf%2Fuploads%2FYn81oIWVZzFMujmGtsAw%2F4.png?alt=media)

Now there are two ways to specify the user you want to register

* By clicking on the dropdown given in the search bar, this will show the list of all users which exist in that active directory:

![](https://3083465318-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FsR50Wa7EwZGlmPSAMkkf%2Fuploads%2Fvr8FakiMGjTwjhqy9H9C%2FAzureAuth1.png?alt=media\&token=80e736e4-c4d7-489c-b66d-8aa00328c002)

* By just directly searching in the search bar for a specific user and clicking &#x65;***nter*** so that user will be selected:

![](https://3083465318-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FsR50Wa7EwZGlmPSAMkkf%2Fuploads%2F2udodvjuw1ceL6NebYR7%2FAzureAuth2.png?alt=media\&token=fdeec2f1-964c-482d-9999-64edf8282342)

6. Once the user has been selected by one of the methods, the selected email id will be displayed in a *User Email Id* grid.

![](https://3083465318-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FsR50Wa7EwZGlmPSAMkkf%2Fuploads%2Fv0Ln7SF5OEu0jhGiIFFH%2FAzureAuth3.png?alt=media\&token=d3ef747b-3a65-45ec-a616-3cc7d410d0fb)

7. Now Click Register and you can see that selected users are added

![](https://3083465318-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FsR50Wa7EwZGlmPSAMkkf%2Fuploads%2FeyZOTY0wlxkOh1V0EwJw%2FAzureAuth4.png?alt=media\&token=697bfa53-d808-4f6b-8b10-e4f3149ad0a2)

8. Now you can [activate them or assign them a role](https://documentation.astera.com/latest/setting-up/user-roles-and-access-control) as you would normally do in Astera

{% hint style="info" %}
**Note:** Users Registered using azure authentication can only be activated, deactivated, or deleted
{% endhint %}

## **Login Using Azure Authentication**

Once users have been registered with Azure authentication, they can login with the same authentication credentials.

To log in, select the *Log In* option from the top right of the client window.

![](https://3083465318-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FsR50Wa7EwZGlmPSAMkkf%2Fuploads%2F5h3gPnfkud2CcHJbhoZC%2F05-Login.PNG?alt=media\&token=3d89049c-4cde-4c56-aec7-19252c676da7)

Selecting this will open a new window.

In the authentication Dropdown, there are three options:

1. *Centerprise*: For Users that are created by using a simple/existing registration method.
2. *Windows Authentication:* For users that are created by using the Windows authentication method.
3. *Azure Authentication:* For users that are created using the Azure authentication method

![](https://3083465318-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FsR50Wa7EwZGlmPSAMkkf%2Fuploads%2F4deQj6CtQq9VxtiO2qP6%2F9.png?alt=media)

2. By selecting Azure Authentication, the email and password textbox will get locked. Click on *Log In*

![](https://3083465318-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FsR50Wa7EwZGlmPSAMkkf%2Fuploads%2FHxclQbjvCmS6VyOjrov2%2F10.png?alt=media)

3. User would be redirected to the Microsoft sign-in screen where they can sign-in as they would normally do with their email id and password.

![](https://3083465318-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FsR50Wa7EwZGlmPSAMkkf%2Fuploads%2FKGOZ7I4V8hxbElcKG0e6%2F11.png?alt=media)

This concludes the working of Azure Authentication in Astera Data Stack.