Azure Onboard Steps Need More Clarification

[MrRoboto]

Need more details and/or videos about onboarding platforms other than GCP, such as Azure and AWS. Mainly Azure at this point. Especially the pre-requisites about creating an Enterprise App and AD Object - it's very vague and unclear, and you should document a fully-detailed example and, where possible, a full video, with an example. For example: pre-req Step 1 B: "

• Pre-Req 1 B. To onboard your Azure subscription on Prisma Cloud, set up an Active Directory application object (Application Client ID) and an Enterprise Application Object ID that together enable API access."

NOTE: The above is badly in need of further explanation, exact detailed example, etc.

For example, I suppose the assumption is that we use the "Create your own application" in Azure "Enterprise applications;" but that is not made crystal clear in your documentation. To make it more confusing, there IS an Enterprise App called "Prisma Cloud SSO" that shows up in Azure Enterprise App Gallery, but I'm sure that's a different app, yet it adds to the confusion. AND, in "Create your own application" in Azure, there are 3 options: 1. "Configure Application Proxy for secure remote access to an on-premise app," 2. "Register an app to integrate with Microsoft Entra", 3. "Integrate any other app you don't find (non-gallery)" - I've abbreviated those a bit. So, you can see how it is very unclear what steps we would take. I'm assuming it is option #3, but then it pops up the "Prisma Cloud SSO" as one Enterprise app to choose: "We found the following apps..." So, PLEASE, at the very least, clarify and, if possible, give a good video example, because you are leaving out a LOT of needed info! Thanks.

[JayGolf]

Hi @MrRoboto ,

Can you share the link to the documentation that you are using? 

[MrRoboto]

Sure, it's the Prisma Cloud Administrator's guide updated as of Oct 6, 2023:

https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/connect-your-cloud-platform...

Thanks.