{"id":3154,"date":"2025-10-28T09:56:15","date_gmt":"2025-10-28T08:56:15","guid":{"rendered":"https:\/\/france.magicsoftware.com\/blog\/?p=3154"},"modified":"2025-10-28T10:17:58","modified_gmt":"2025-10-28T09:17:58","slug":"azure-key-vault-magic-xpi","status":"publish","type":"post","link":"https:\/\/france.magicsoftware.com\/blog\/magic-xpi\/azure-key-vault-magic-xpi\/","title":{"rendered":"Azure Key Vault – Magic xpi"},"content":{"rendered":"\n

Goal <\/strong>: Retrieve secret values from Azure Key Vault protected by certificat with Magic xpi using REST API<\/p>\n\n\n\n

1\/ Generate your certificat (pfx format) and declare it in the azure console (Azure Key Vault)<\/p>\n\n\n\n

You can use standard powershell script to generate and export the pfx certificate.<\/p>\n\n\n\n

2\/ To test with postman, you need first to generate the Client_Assertion in other to get the token<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

2\/ Define 2 resources one for the token and one for Key Vault.<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n
\"\"<\/figure>\n\n\n\n

Replace <myazurekeyvault) with your own keyvault.<\/p>\n\n\n\n

Don’t forget to set in the Query tab control : api-version with 2016-10-01<\/p>\n\n\n\n

3\/ To Generate the Client_Assertion, we will use a piece of java code<\/p>\n\n\n\n

We are going to use a Java Class AzureKeyVault with method getClientAssertion. We will call this method with Magic JcallStatic function.<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

This signature function will accept 4 parameters (tenantId, clientId, pfxPath and pfxPassword).<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

Drag and drop a Flow data connector in your Magic xpi flow<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

Define 2 variables C.ClientAssertio<\/strong>n (alpha unlimited) and F.BodyBlo<\/strong>b (Blob).<\/p>\n\n\n\n

Update your context variable with JCallStatic function (see Magic xpa Help for the syntax)<\/p>\n\n\n\n

MagicAzureClass environment Variable has the value : com.magicsoftware.azureauth.AzureKeyVault<\/p>\n\n\n\n

TenantID corresponds to your azure tenant Id as well as for ClientId to azure client id and CPassword for certificate password<\/p>\n\n\n\n

The second operation updates the body request that will be used for the getting the token.<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

!! You must copied 4 jar files inside your Magic xpi runtime\\java\\lib folder<\/strong><\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

4\/ Drag and drop REST Client connector and link it to the MicrosoftOnline resource<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

Press OK and set the tenantid with your tenant and DataBlob your Flow variable F.BodyBlob (updated in the previous step)<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

5\/ Drag and Drop a Flow Data connector.<\/p>\n\n\n\n

Update C.Accesstoken context variable with Trim (StrToken (StrToken (C.UserBlob,2,'\u00a0\u00bbaccess_token\u00a0\u00bb:\u00a0\u00bb‘),1,'\u00a0\u00bb}’))<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

6\/ Drag and drop a REST Client connector and link it to AzureKeyVault resource<\/p>\n\n\n\n

Set the Bearer token by clicking the Parameters and press OK <\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

Set the secret name you want to retrieve from your Azure Key Vault<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

7\/ When you execute the flow, you should get the AccessToken,, the ClientAssertion and the content of your secret in C.UserBlob<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

<\/p>\n","protected":false},"excerpt":{"rendered":"

Goal : Retrieve secret values from Azure Key Vault protected by certificat with Magic xpi using REST API 1\/ Generate your certificat (pfx format) and declare it in the azure console (Azure Key Vault) You can use standard powershell script to generate and export the pfx certificate. 2\/ To test with postman, you need first […]<\/p>\n","protected":false},"author":1,"featured_media":3198,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","ast-disable-related-posts":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[31,86,4,28],"tags":[87,14],"class_list":["post-3154","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-azure","category-azure-key-vault","category-magic-xpi","category-microsoft","tag-azure-key-vault","tag-magic-xpi"],"aioseo_notices":[],"jetpack_featured_media_url":"https:\/\/france.magicsoftware.com\/blog\/wp-content\/uploads\/2025\/10\/AKV_MG1_-1.png","_links":{"self":[{"href":"https:\/\/france.magicsoftware.com\/blog\/wp-json\/wp\/v2\/posts\/3154","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/france.magicsoftware.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/france.magicsoftware.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/france.magicsoftware.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/france.magicsoftware.com\/blog\/wp-json\/wp\/v2\/comments?post=3154"}],"version-history":[{"count":23,"href":"https:\/\/france.magicsoftware.com\/blog\/wp-json\/wp\/v2\/posts\/3154\/revisions"}],"predecessor-version":[{"id":3197,"href":"https:\/\/france.magicsoftware.com\/blog\/wp-json\/wp\/v2\/posts\/3154\/revisions\/3197"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/france.magicsoftware.com\/blog\/wp-json\/wp\/v2\/media\/3198"}],"wp:attachment":[{"href":"https:\/\/france.magicsoftware.com\/blog\/wp-json\/wp\/v2\/media?parent=3154"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/france.magicsoftware.com\/blog\/wp-json\/wp\/v2\/categories?post=3154"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/france.magicsoftware.com\/blog\/wp-json\/wp\/v2\/tags?post=3154"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}