Integration of JFrog OIDC with Azure

In the JFrog Platform, create an OIDC integration between Azure to the JFrog Platform:

1. Navigate to the Administration tab In the JFrog Platform UI.

2. Click General Management | Integrations.

   The Integrations page appears.

3. Provide a unique alphanumeric name for the provider name.

4. Select the Azure provider type and enter a meaningful description.

In the Azure Platform:

1. Sign in to the Azure portal and navigate to your app.

2. Select Authentication in the menu on the left. Select the Endpoints tab.

3. In the OpenID Connect metadata document field, copy the URL without the section "well-known/openid-configuration".

   

   For example:

   https://login.microsoftonline.com/<tenant-id>/v2.0

In the JFrog Platform, OIDC Integrations page, copy the URL from the previous step to the Provider URL field.

In the Azure Platform, in the Azure portal:

1. Select Expose an API in the menu on the left. Select the Endpoints tab.

2. Copy the Application ID URI field.

   

In the JFrog Platform, OIDC Integrations page, copy the URL from the previous step to the Audience field.

Retrieve the Azure OIDC ID Token. Following is an example of how to do this.

1. In Postman, run the Get Azure ID Token API.

   

   An example of the API payload could be as follows:

   client_id=e75acab0-bef0-4e34-8edd-2eab45f1e5dc&grant_type=client_credentials&scope=api://e75acab0-bef0-4e34-8edd-2eab45f1e5dc/.default&client_secret=xxxxxxxxxxxxxxxxxxxxx

2. From the Results Body, copy the Access Token.

   

Decode, verify and generate the JSON Web Token (JWT), for example using jwt.io:

1. Copy the access token from the previous step into the Encoded field.

   

2. In the Decoded field, in the Payload Data section, copy the issuer URL from the iss parameter.

   

In the JFrog Platform, OIDC Integrations page, copy the issuer URL from the previous step to the Token Issuer field.

Click Save and Continue.

In the Identity Mappings window, fill in the mapping details.

Provide a name and priority.

Define the JSON Claims to fit your requirements. As an example, you can use the subject from jwt.io, in the Decoded field Payload Data section, copy the subject name/value pair.

In the JFrog Platform, Identity Mappings window, add the JSON Claims. For example, you can copy the subject from the previous step to the Claims JSON field.

In the JFrog Platform, Identity Mappings window:

1. Enter a user name.

2. For the Service field, select a service or click All.

3. Define a token expiration time.

4. Click Save.

In the JFrog Platform, OIDC Integrations page, click Save.

To exchange tokens, get the Azure ID Token. Following is an example of how to do this:

1. In Postman, run the Get Azure ID Token API.

   

2. From the Results Body, copy the Access Token.

   

3. In Postman, for the JFrog OIDC Token Exchange API, in the payload body, copy the access token from the previous step into the subject token value.OIDC Token Exchange

   Set the provider name to be the unique name previously selected. Set the grant type to be token exchange. Click Send.

   

4. From the response body, copy the Access Token.

   

Use the acquired token in requests to Artifactory APIs.