WEBVTT

1
00:00.000 --> 00:07.100
Our next step now that we've verified that we have permissions to do it,

2
00:07.100 --> 00:10.640
is to create an application in Azure.

3
00:10.640 --> 00:13.740
Register that application with Microsoft,

4
00:13.740 --> 00:18.420
Enter ID previously Azure Active Directory,

5
00:18.420 --> 00:23.220
but we need to assign it the roles that it needs to performance job.

6
00:23.220 --> 00:25.700
This is how Cloud OnRAMP is going to be

7
00:25.700 --> 00:28.860
authenticating against Microsoft Azure.

8
00:28.860 --> 00:32.380
So we need to make sure that it has the appropriate permissions
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

8
00:28.860 --> 00:32.380
So we need to make sure that it has the appropriate permissions

9
00:32.380 --> 00:34.900
in order to perform the necessary tasks.

10
00:34.900 --> 00:36.700
So let's go ahead and jump in,

11
00:36.700 --> 00:41.500
create the application and give it the appropriate permissions.

12
00:41.500 --> 00:46.540
So starting off again here on the Azure Portal Home,

13
00:46.540 --> 00:49.580
we can see here right under Azure Services,

14
00:49.580 --> 00:52.060
we can go to Microsoft,

15
00:52.060 --> 00:54.900
Enter ID, let's click on that.

16
00:54.900 --> 00:58.820
Next, let's open Manage over here on the left,

17
00:58.820 --> 01:01.460
and let's go to App Registrations.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

17
00:58.820 --> 01:01.460
and let's go to App Registrations.

18
01:01.460 --> 01:03.460
Here under App Registrations,

19
01:03.460 --> 01:06.140
we're going to create a new registration.

20
01:06.140 --> 01:10.100
So we'll simply open this tab up here to create a new registration.

21
01:10.100 --> 01:12.660
First thing we have to do is give it a name.

22
01:12.660 --> 01:15.060
This is entirely your choice.

23
01:15.060 --> 01:17.260
We'll go ahead and just call it VManage,

24
01:17.260 --> 01:20.060
since that's essentially what we're creating this for.

25
01:20.060 --> 01:23.020
Next, you see we can change the account type,

26
01:23.020 --> 01:25.260
we can use accounts that are in

27
01:25.260 --> 01:27.380
this organizational directory only,

28
01:27.380 --> 01:29.380
so for another words, a single tenant,

29
01:29.380 --> 01:32.420
we can choose a multi-tenant account,
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

29
01:29.380 --> 01:32.420
we can choose a multi-tenant account,

30
01:32.420 --> 01:35.500
we can choose account from any directory,

31
01:35.500 --> 01:40.260
such as they're giving some examples here of like Skype or Xbox,

32
01:40.260 --> 01:43.780
or we can just use personal Microsoft accounts.

33
01:43.780 --> 01:46.660
In this case, we can leave the default the way it is,

34
01:46.660 --> 01:48.340
we just want the default directory,

35
01:48.340 --> 01:50.740
since that's the directory we're currently in,

36
01:50.740 --> 01:54.580
and single tenant's fine for this application.

37
01:54.580 --> 01:57.060
So we can leave the rest of these defaults as they are,

38
01:57.060 --> 02:00.500
we'll just go ahead and come down here and hit Register.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

38
01:57.060 --> 02:00.500
we'll just go ahead and come down here and hit Register.

39
02:00.500 --> 02:03.020
And now that we've registered the application,

40
02:03.020 --> 02:06.420
we can pick up two more of the pieces of information

41
02:06.420 --> 02:09.500
that we're going to need to do our authentication.

42
02:09.500 --> 02:14.300
We're going to need the application ID or the client ID,

43
02:14.300 --> 02:18.220
and we're going to need the directory ID or the tenant ID.

44
02:18.220 --> 02:21.700
Go ahead and copy those, keep those handy.

45
02:21.700 --> 02:23.260
Once we have those copied,

46
02:23.260 --> 02:26.580
we then have to create the actual credentials.

47
02:26.580 --> 02:29.740
So over here, under client credentials,

48
02:29.740 --> 02:33.100
let's click on the Add Certificate or Secret.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

48
02:29.740 --> 02:33.100
let's click on the Add Certificate or Secret.

49
02:33.100 --> 02:36.060
Notice that it defaults here to client secrets,

50
02:36.060 --> 02:38.180
and that is what we're going to be using.

51
02:38.180 --> 02:41.540
So next, let's hit a new client secret.

52
02:41.540 --> 02:43.700
We'll give it a description,

53
02:43.700 --> 02:48.100
we'll just call it VManageKey, we'll hit Add.

54
02:48.100 --> 02:52.700
And then what we want to do is actually copy the value.

55
02:52.700 --> 02:54.740
The value is what we're going to need to provide

56
02:54.740 --> 02:56.820
to do the authentication.

57
02:56.820 --> 02:58.140
So there's a little button right here

58
02:58.140 --> 03:01.180
where you can actually click on it just to copy it,
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

58
02:58.140 --> 03:01.180
where you can actually click on it just to copy it,

59
03:01.180 --> 03:03.500
and then keep it handy.

60
03:03.500 --> 03:06.540
And just so you understand why it's the value that we need,

61
03:06.540 --> 03:11.820
the secret ID is just identifying this particular secret key.

62
03:11.820 --> 03:15.580
The value is the actual key itself.

63
03:15.580 --> 03:18.740
So now that we have this, our next step is going to be

64
03:18.740 --> 03:22.860
to assign the appropriate role to this application.

65
03:22.860 --> 03:25.220
So now we need to go back into our subscription.

66
03:25.220 --> 03:27.620
So let's just go back to Home.

67
03:27.620 --> 03:30.380
From Home, we'll click on our subscription.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

67
03:27.620 --> 03:30.380
From Home, we'll click on our subscription.

68
03:30.380 --> 03:33.940
In our subscription, we'll click on Access Control.

69
03:33.940 --> 03:36.260
From here, let's click on Add,

70
03:36.260 --> 03:39.100
and we want to add a role assignment.

71
03:39.100 --> 03:43.180
We want to change this to privileged administrator roles,

72
03:43.180 --> 03:46.180
and the role that we want to give to this account

73
03:46.180 --> 03:48.660
is the role of contributor.

74
03:48.660 --> 03:52.540
So we'll go ahead and hit Contributor, hit Next.

75
03:52.540 --> 03:55.340
We'll come up here and select Members.

76
03:55.340 --> 03:58.380
Under Select, we'll type in our app name,

77
03:58.380 --> 04:02.300
and then choose it on our list, hit Select.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

77
03:58.380 --> 04:02.300
and then choose it on our list, hit Select.

78
04:02.300 --> 04:08.300
And now VManage is on our list with this role assigned to it.

79
04:08.300 --> 04:11.740
So now we'll simply hit Review and Assign.

80
04:11.740 --> 04:13.900
Everything here looks good.

81
04:13.900 --> 04:16.660
And we'll go ahead and complete the process.

82
04:16.660 --> 04:18.060
If everything worked correctly,

83
04:18.060 --> 04:21.140
we should now be able to click on Role Assignments.

84
04:21.140 --> 04:24.820
And we see that now VManage is in here as an app

85
04:24.820 --> 04:27.740
and as a contributor.

86
04:27.740 --> 04:30.100
So now we have an application set up
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

86
04:27.740 --> 04:30.100
So now we have an application set up

87
04:30.100 --> 04:33.860
that VManage can use given all of the information

88
04:33.860 --> 04:38.180
we've collected, remembering we need the subscriber ID,

89
04:38.180 --> 04:42.900
the tenant ID, the client ID, and our secret key.

90
04:42.900 --> 04:46.500
We have all that recorded, and we have the correct role

91
04:46.500 --> 04:50.820
assigned to this application in Microsoft Azure.

92
04:50.820 --> 04:54.260
So now we need to start deploying our network components

93
04:54.260 --> 04:56.580
that we need to support Cloud OnRAMP.

94
04:56.580 --> 05:00.740
And that's exactly what we're going to do in the next video.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

94
04:56.580 --> 05:00.740
And that's exactly what we're going to do in the next video.