Acquiring Azure credentials

Matillion ETL supports OAuth authentication across several Microsoft third-party services, all of which share the same initial steps to access and generate credentials. This topic covers the process of acquiring those credentials. You will then need to refer to the individual OAuth topics listed below to complete the process and use the configured OAuth entry in Matillion ETL.

Acquire credentials

1. Log in to the Microsoft Azure Portal.
2. From the Azure services menu, click App registrations. If App registrations is not visible, click More services on the right of the menu for a longer list of options.
3. On the App registrations page, click + New registration.
4. On the Register an application page, provide details for the following fields:
   • Name: A name for the app.
   • Supported account types: Select Accounts in any organizational directory (Any Azure AD directory - Multitenant).
   • Redirect URI: Select Web in the drop-down field and paste the Callback URL copied from the Manage OAuth window in Matillion ETL earlier. Note that although the page states this field is optional, you must complete it.
5. Click Register.
6. Your browser will redirect to the Overview page for your new app. From here, copy the credentials to the right of Application (client) ID and (if also required) Directory (tenant) ID, as these credentials will be required later when authorizing for use in Matillion ETL.
   • When copying the credentials, some browsers may add a space to the end of the string. This will cause the credentials to fail.
7. In your app's overview page, expand the Manage item in the left sidebar and then click Authentication.
8. Scroll down to the Implicit grant and hybrid flows section, and select the checkbox next to ID tokens (used for implicit and hybrid flows), then click Save.
9. Click Certificates & secrets, also located in the Manage item in the left sidebar.
10. Click + New client secret.
11. The Add a client secret dialog will display on the right of your screen. Provide details for the following fields:
    • Description: Provide a description of the client secret.
    • Expires: Use the Expires dropdown to select when the client secret should expire.
12. Click Add.
13. You will be returned to the Certificates and secrets page, where the new client secret will appear in the list in the Client secrets tab. Copy the client secret Value, as it will be required when authorizing for use in Matillion ETL.
    • Make sure to copy the client secret right away as it may appear only once.
    • Additionally, when copying the client secret, some browsers may add a space to the end of the string. This will cause the credentials to fail.
14. Click API permissions, also located in the Manage item in the left sidebar.
15. Click + Add a permission to open the Request API permissions dialog on the right of your screen.
16. Continue the process for your specific OAuth:
    • Bing Ads
    • Dynamics 365
    • Dynamics 365 Business Central
    • Dynamics 365 Sales
    • Dynamics CRM
    • Microsoft Exchange
    • SharePoint