Connectors and Connections

Back Next

Prepare for authentication

You can configure Shared Key, Managed Identity, and Service Principal authentication types to access Microsoft Azure Data Lake Storage Gen2. Before you configure the authentication, you need to set up your environment and keep the authentication details handy.

Create storage account and configure access

To access Microsoft Azure Data Lake Storage Gen2, follow these steps to set up your environment:

Set up a storage account to use with Microsoft Azure Data Lake Storage Gen2 and create a blob container in the storage account. You can use role-based access control or access control lists to authorize users to access the resources in the storage account.

Register the application in Azure Active Directory to authenticate users to access the Microsoft Azure Data Lake Storage Gen2 account. You can use role-based access control or access control lists to authorize the application.

Create an Azure Active Directory web application for service-to-service authentication with Microsoft Azure Data Lake Storage Gen2. Ensure that you have superuser privileges to access the folders or files created in the application.

For more information about these prerequisite tasks, see the Informatica How-To Library article, Prerequisites to create a Microsoft Azure Data Lake Storage Gen2 connection.

Get authentication details

Ensure you get all the required authentication details based on the authentication method you want to use in the connection:

Service principal authentication: You need the client ID, client secret, and tenant ID for your application registered in the Azure Active Directory.
Shared key authentication: You need the account key for the Microsoft Azure Data Lake Storage Gen2 account.
Managed identity authentication: You need the client ID or application ID for your application registered in the Azure Active Directory. Before you get the client ID or application ID, be sure to complete certain prerequisites.