Registering an Azure Application for OAuth2 Proxy

If you plan to use OAuth2 Proxy to allow access to the UIs of the solution only for users that are authenticated in Azure, create an app in Azure by completing these steps:

1. Log in to the Azure portal.

2. Choose Azure Active Directory in the left menu, select App registrations, and then click New app registration.

3. Specify a name for the app and choose the Webapp / API application type. Specify the https://prometheus.BASE_DOMAIN sign-on URL. Then, click Create.

   Note: BASE_DOMAIN is the domain that the Prometheus, Alertmanager, and Grafana UI URLs will be based on. You will need to specify this domain when preparing your infra.yaml.

4. On the Settings / Properties page of the app:

   1. Pick a logo for the app.

   2. Select Multi-tenanted if you want to allow users from multiple organizations to access your app.

   3. Write down the application ID. You will need it when preparing your infra.yaml.

   4. Click Save.

5. On the Settings / Required Permissions page of the app:

   1. Click Windows Azure Active Directory.

   2. Click Access the directory as the signed in user.

   3. Click Save.

   4. Click Grant permissions (you might need another admin to do this).

6. On the Settings / Reply URLs page of the app:

   1. Add the following URLs:

      • https://prometheus.BASE_DOMAIN/oauth2/callback

      • https://alertmanager.BASE_DOMAIN/oauth2/callback

      • https://grafana.BASE_DOMAIN/oauth2/callback

   2. Click Save.

7. On the Settings / Keys page of the app:

   1. Add a new key.

   2. Click Save.

   3. Write down the value of the key. You will need it when preparing your infra.yaml.

8. Obtain and write down your Azure Active Directory tenant ID. You will need it when preparing your infra.yaml.