Chapter 5. Connecting to Red Hat Ansible Automation Platform

Procedure

1. In a web browser, open the Azure portal.
2. Ensure that you are using the tenant where you deployed Ansible Automation Platform.
3. Type Microsoft Entra ID in the search bar.
4. Select Microsoft Entra ID from the search results.
5. Under Manage in the menu options, click App registrations.
6. In the App registrations page, click + New registration.

7. Configure the new registration as follows:

   • In the Name field, enter the same name that you used for the deployed application.
   • Select the default value for Supported account types.
   • Select Web for Redirect URI (optional).
   • In the Redirect URI (optional) field, enter the Microsoft Entra ID OAuth2 Callback URL value that you fetched from Ansible Automation Platform.
8. Click Register to create the registration.

Procedure

1. In the Ansible Automation Platform application registration page on Azure, copy and save the value of Application (client) ID.

   You need this value for the Microsoft Entra ID OAuth2 Key in the Ansible Automation Platform settings.

2. Under Manage, click Certificates & secrets.
3. Click Client secrets and then New client secret.

4. Provide a description for the new secret.

   • It is not possible to automatically renew a certificate or identify when it is about to expire.
   • It is useful to include the date in the description, for example: Ansible Automation Platform Client Secret <Today’s Date in YYYY-MM-DD format>.

5. Provide an expiration date for the new secret.

   1. The maximum lifetime for the certificate is 2 years. Unless you have specific security needs that prevent the creation of a long term certificate, select an expiration date of 24 months.
6. Save the secret Value to a location on your local machine. After you navigate away from this page the secret value is no longer retrievable.

Procedure

1. Navigate to the Azure portal
2. Click the Cloud Shell icon to open a bash Cloud Shell in your browser.

3. Set the Azure CLI to use the subscription that you intend to use for automating Azure services. Run the following command from the shell:

   az account set --subscription <your_subscription_id>

4. Run the following command using the Azure CLI to create a privileged service principal in Microsoft Entra ID:

   az ad sp create-for-rbac --name ansible --role Contributor

   The output displays the appID and tenant keys for the service principal:

   {
     "appId": "xxxxxxx-xxx-xxxx",
     "displayName": "ansible",
     "name": "xxxxxxx-xxx-xxxx",
     "password": "xxxxxxx-xxx-xxxx",
     "tenant": "xxxxxxx-xxx-xxxx"
   }

5. Store the service principal details securely, as they are displayed only when you create the secret.