> ## Documentation Index
> Fetch the complete documentation index at: https://docs.dqlabs.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Setup

> Step-by-step instructions for connecting Azure Key Vault to Prizm using a service principal.

<script type="application/ld+json">
  {`{
            "@context": "https://schema.org",
            "@type": "TechArticle",
            "headline": "Azure Key Vault Setup",
            "description": "Step-by-step instructions for connecting Azure Key Vault to Prizm using a service principal.",
            "url": "https://docs.dqlabs.ai/integrations/azure-key-vault/setup",
            "publisher": {
              "@type": "Organization",
              "name": "DQLabs Inc",
              "logo": "https://media.brand.dev/332adc35-5bc4-4d2b-bf78-256aa4a5e414.svg"
            }
            }`}
</script>

## Connecting Azure Key Vault to Prizm

Before starting, complete the [Azure prerequisites](/integrations/azure-key-vault/prerequisites) to create a service principal and collect the Vault Address, Tenant ID, Client ID, and Client Secret.

<Steps>
  <Step title="Open Integration settings">
    Navigate to **Organization** → **Integration** and click **Add** to open the channel catalog. Click the **Vault** filter tab, then click the **Azure Key Vault** tile to open the configuration form.

    <Frame>
      <img src="https://mintcdn.com/dqlabs/GiXAkw4MyBAWLJHq/images/image-66.png?fit=max&auto=format&n=GiXAkw4MyBAWLJHq&q=85&s=d4ba8d0ee9283880d0f1a96d081cf105" alt="Image" width="2446" height="1186" data-path="images/image-66.png" />
    </Frame>
  </Step>

  <Step title="Enter a name and optional description">
    Enter a display **Name** for this vault connection (e.g., `Azure Key Vault`). Optionally add a **Description**.
  </Step>

  <Step title="Enter the Vault address">
    Enter the **Vault URI** from your Azure Key Vault overview page (e.g., `https://yourkeyvault.vault.azure.net`).
  </Step>

  <Step title="Enter Tenant ID and Client ID">
    Enter the **Directory (tenant) ID** and **Application (client) ID** from your app registration.
  </Step>

  <Step title="Enter the client secret">
    Paste the client secret **Value** copied during the prerequisites step.
  </Step>

  <Step title="Save the configuration">
    Click **Update Integration**. Prizm authenticates with Azure AD using the service principal credentials and verifies access to the Key Vault.

    <Frame>
      <img src="https://mintcdn.com/dqlabs/GiXAkw4MyBAWLJHq/images/image-66.png?fit=max&auto=format&n=GiXAkw4MyBAWLJHq&q=85&s=d4ba8d0ee9283880d0f1a96d081cf105" alt="Image" width="2446" height="1186" data-path="images/image-66.png" />
    </Frame>
  </Step>
</Steps>

## Configuration reference

| Field             | Required | Description                                                                                |
| ----------------- | -------- | ------------------------------------------------------------------------------------------ |
| **Name**          | Yes      | Display name for this vault connection (e.g., `Azure Key Vault`).                          |
| **Description**   | No       | Optional description to distinguish this integration from others.                          |
| **Vault Address** | Yes      | Vault URI from the Key Vault overview page (e.g., `https://yourkeyvault.vault.azure.net`). |
| **Tenant ID**     | Yes      | Azure AD directory (tenant) ID from the app registration.                                  |
| **Client ID**     | Yes      | Application (client) ID from the app registration.                                         |
| **Client Secret** | Yes      | Client secret value from Certificates & secrets in the app registration.                   |

<Note>
  Client secrets expire on the date chosen during creation. Update the value in Prizm before the secret expires — connectors using this vault integration will fail to retrieve credentials if the secret is expired.
</Note>