Skip to main content
Question

Connecting to azure with managed identity for azure key vault (FME Form)

  • March 7, 2025
  • 2 replies
  • 129 views

tva
Contributor
Forum|alt.badge.img+13

Hi,

IT is storing our passwords in azure key vault and they are rotating on a structural basis.

We don’t have FME Flow.

There is an FME app registration in azure, so i have tenant id, client id and client secret that can be used for like blob storage and sharepoint.

Is there a way to connect in FME to azure key vault?

Also IT is talking about using managed identity, are there any examples on how this can be implemted to fetch passwords from key vault?

2 replies

david_r
Celebrity
  • March 10, 2025

I don’t think there is anything like this already in FME (as far as I know), but perhaps you could use Python to periodically fetch the updated credentials from Azure and then the “fmewebservices” Python module to update the web and database connections accordingly.

https://docs.safe.com/fme/html/fmepython/api/fmewebservices/index.html


j.botterill
Influencer
Forum|alt.badge.img+53
  • Influencer
  • March 11, 2025

There is Azure%StorageConnector transformer that can upload, download, list or delete objects in your Azure Storage Account. 

You’ll need to configure a web service to the Password vault. Sounds like no template exists for this

Then create Web Connection with Azure from FME 

This article explains a few (potential) options https://support.safe.com/hc/en-us/articles/25407611329933-Connecting-to-Azure-Storage-in-FME