Search documentation...

ChangelogBook a demoSign up

Microsoft Azure


Hightouch's Azure integration powers several features: external storage via Azure and the Azure Blob Storage source.

Configure Azure

Azure configuration includes creating an app registration and granting access to Blob Storage. Once you've done both of these, you can use your Blob Storage information and Azure credentials to connect Hightouch.

Create an app registration

  1. In the Azure Portal, navigate to Azure Active Directory.

    Azure Portal screenshot

  2. Locate and click Manage > App registrations in the left-hand menu.

    Azure Portal screenshot

  3. Create a new app registration by selecting + New registration. Give the application a descriptive Name, for example, "Hightouch-integration-user," and leave the Supported account type as Accounts in this organizational directory only (Default Directory only - Single tenant). You don't need a redirect URI for Hightouch storage integration. Click Register when done.

    Azure Portal screenshot

  4. Next, you need an app secret for this account. While on the app registration screen, navigate to Manage > Certificates & secrets in the left-hand menu. In the Client secrets tab, click New client secret. Enter a Description and Expires time frame. Click Add to create the secret.

    Make sure to select a sufficient expiry time frame. If this credential expires, Hightouch can't access your Azure Blob Storage, and if your workspace is configured to use Azure for log storage, all syncs will fail.

    Azure Portal screenshot

  5. Copy and store the secret Value, not the Secret ID, after you create it. You won't be able to read the value again later.

Azure Portal screenshot

  1. Navigate to the App Overview in the left-hand menu. Copy and save the Application (client) ID and Directory (tenant) ID. You need both of these and the Client secret value to configure Hightouch.
    Azure Portal screenshot

Grant access to Blob Storage

  1. In the Azure Portal, navigate to your storage account, and then to the Blob Storage container you want to connect to Hightouch. If you don't have a container, create one.

    Azure Portal screenshot

  2. In the configuration for your Blob Storage container, go to Access Control (IAM) in the left-hand menu.

    Azure Portal screenshot

  3. Select +Add then Add role assignment.

    Azure Portal screenshot

  4. Select the role you want to grant to the Hightouch integration. To use the integration for storage, we suggest using the Storage Blob Data Contributor role. If you want to assign more granular permissions, refer to the for storage documentation and consult your Active Directory administrator. Once you've selected the role, click Next to assign Members to the role.

    Azure Portal screenshot

  5. Keep User, group, or service principal as the access assignment. Click + Select members and search for and select the Hightouch integration user you created during app registration.

    Azure Portal screenshot

  6. Click Review + assign to confirm. The Hightouch user should now have access to your Azure Blob Storage.

Configure Hightouch

To configure Hightouch to use the Azure integration user, go to the Cloud providers tab on the Settings page. Click Add cloud provider, and select Microsoft Azure.

Adding a new cloud provider in Hightouch

Give your credential a Display name, and enter the Tenant ID, Client ID, and Client secret from your Azure configuration.

Azure Portal screenshot

Azure credential usage

Once you've set up your Microsoft Azure credentials in Hightouch, you can select Microsoft Azure when setting up external storage.

Hightouch app screenshot

Ready to get started?

Jump right in or a book a demo. Your first destination is always free.

Book a demoSign upBook a demo

Need help?

Our team is relentlessly focused on your success. Don't hesitate to reach out!

Feature requests?

We'd love to hear your suggestions for integrations and other features.

Last updated: May 15, 2024

On this page

OverviewConfigure AzureCreate an app registrationGrant access to Blob StorageConfigure HightouchAzure credential usage

Was this page helpful?