Skip to content

Commit

Permalink
Patch 508 (#529)
Browse files Browse the repository at this point in the history
* Update identity-enabled.md

* update images for all steps

* Update identity-enabled.md

* Apply suggestions from code review

Co-authored-by: alphadev4 <[email protected]>
  • Loading branch information
shuklaalok87 and alphadev4 authored Nov 4, 2022
1 parent 60bf4c9 commit 0a393a4
Show file tree
Hide file tree
Showing 8 changed files with 7 additions and 8 deletions.
15 changes: 7 additions & 8 deletions en/azure/appservice/identity-enabled.md
Original file line number Diff line number Diff line change
Expand Up @@ -15,13 +15,12 @@
| **Recommended Action** | Enable system or user-assigned identities for all App Services and avoid storing credentials in code. |

## Detailed Remediation Steps

1. Log into the Microsoft Azure Management Console.
2. Select the "Search resources, services, and docs" option at the top and search for App Services. </br> <img src="/resources/azure/appservice/identity-enabled/step2.png"/>
3. Select the "App Services" by clicking on the "Name" link to access the configuration changes.</br> <img src="/resources/azure/appservice/identity-enabled/step3.png"/>
2. Find the search bar at the top and search for App Services. </br> <img src="/resources/azure/appservice/identity-enabled/step2.png"/>
3. Select the "App Service" by clicking on "Name" to go to its configuration.</br> <img src="/resources/azure/appservice/identity-enabled/step3.png"/>
4. Scroll down the selected "App Services" navigation panel and in "Settings" click on the "Identity" option.</br <img src="/resources/azure/appservice/identity-enabled/step4.png"/>
5. On the "Identity" page verify the "Status" option under "System assigned" tab. Is the "Status" is set to "Off" then the "Identity" is not enabled to authenticate to App Service without storing credentials in the code. </br> <img src="/resources/azure/appservice/identity-enabled/step5.png"/>
6. Repeat steps number 2 - 5 to verify other "Apps" Identity status in the account.</br>
7. Navigate to the "App Services", select the "App Service" and click on the "Name" as a link to access the configuration, select the "Identity" under "Settings."</br> <img src="/resources/azure/appservice/identity-enabled/step7.png"/>
8. On the "System assigned" page scroll down and select the "On" option next to "Status" and click on the "Save" button to ensure identity is authenticated to all services that supports Azure AD authentication, without having to include any credentials in code. </br> <img src="/resources/azure/appservice/identity-enabled/step8.png"/>
9. Repeat above steps to ensures a system or user assigned managed identity is enabled to authenticate to App Service without storing credentials in the code. </br>
5. On the "Identity" page verify the "Status" option under "System assigned" tab. If the "Status" is set to "Off" then the "Identity" is not enabled to authenticate to App Service without storing credentials in the code. It is recommended to use Identity management to store credentials for other services such as Storage, SQL etc.</br> <img src="/resources/azure/appservice/identity-enabled/step5.png"/>
6. If the "Status" is set to "Off" then select the "On" option next to "Status" to turn on Identity management. </br> <img src="/resources/azure/appservice/identity-enabled/step6.png"/>
7. Click on the "Save" button at the top to ensure identity is authenticated to all services that supports Azure AD authentication, without having to include any credentials in code. </br> <img src="/resources/azure/appservice/identity-enabled/step6.png"/>
8. Click "Yes" in the confirmation popup to complete the change.</br> <img src="/resources/azure/appservice/identity-enabled/step8.png"/>
9. Repeat steps 3 - 8 to ensure a system or user assigned managed identity is enabled for all "App services" in the account. </br>
Binary file modified resources/azure/appservice/identity-enabled/step2.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file modified resources/azure/appservice/identity-enabled/step3.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file modified resources/azure/appservice/identity-enabled/step4.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file modified resources/azure/appservice/identity-enabled/step5.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file not shown.
Binary file modified resources/azure/appservice/identity-enabled/step8.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.

0 comments on commit 0a393a4

Please sign in to comment.