# Configuring Azure Key Vault

## Base Configuration

Provide the base configuration parameters. Information you entered during the initial creation of the credential provider is automatically entered into the fields in the **Base Configuration** page. You can edit this information if necessary.

> [!NOTE]
>
> **Screenshot**
>
> [![Base Configuration](<https://documentation.sailpoint.com/connectors/credential_providers/azure_key_vault/help/img/base_config.png>)](<https://documentation.sailpoint.com/connectors/credential_providers/azure_key_vault/help/img/base_config.png>)

> [!NOTE]
>
> Ensure that the name and description of each credential provider is unique.

1. Go to **Admin \> Connections \> Credential Providers**.
2. Search for the credential provider you want to edit.
3. Enter a unique **Credential Provider Name**.
4. Enter a **Credential Provider Description** that provides details necessary to distinguish it from similar credential providers.
5. Select a **Credential Provider Owner** by typing the owner's name into the field provided. Matches display after you type at least two letters. Select the credential provider owner as required.
6. Select a **Virtual Appliance Cluster** with connectivity to the credential provider. For more information about configuring and deploying virtual appliances, refer to the [Virtual Appliance Reference Guide](<https://documentation.sailpoint.com/saas/help/va/index.html>).
7. Select **Save**.

## Connection Settings

Configure the connection parameters to connect to and authenticate with Azure Key Vault.

> [!NOTE]
>
> **Screenshot**
>
> [![Connection Settings](<https://documentation.sailpoint.com/connectors/credential_providers/azure_key_vault/help/img/connection_settings.png>)](<https://documentation.sailpoint.com/connectors/credential_providers/azure_key_vault/help/img/connection_settings.png>)

To configure an authenticated connection:

1. Enter the **Client ID** assigned to your client app to authenticate OAuth requests.
2. Enter the **Client Secret** issued to the client app.
3. Enter the **OAuth 2.0 Token URL** to request an access token for a user.
4. Enter the **Scope** for authenticating the client app.
5. Enter the **Azure Key Vault API Version**.
6. (Optional) Enable credential caching. For more information, refer to [Caching Credentials](<https://documentation.sailpoint.com/connectors/credential_providers/azure_key_vault/help/cred_caching.html>).
7. Select **Save**.

> [!NOTE]
>
> To create a Client ID and Client Secret to retrieve secrets from Azure Key Vault, refer to the [OAuth 2.0 client credentials grant](<https://learn.microsoft.com/en-us/entra/identity-platform/v2-oauth2-client-creds-grant-flow>).