Create Service Principal from Azure Portal

Service principal can be created in azure portal using the below steps

Steps:

1. Login to the Azure portal using the Azure Stack service admin credentials.

2. Click on Manage Azure Active Directory.

3. Click on App registrations from the left pane and click on New registration.

4. Enter the Name like ’Cloud Assert VConnect SPN Stamp4’ and the Supported account types should be selected as ‘Accounts in this organizational directory only’.

4. Click Register and will be landed on the application overview page.

6. Click on Add an Application ID URI and Frame Application ID URI like below

https://vconnect.{DirectoryTenantName}/azs/multi-stamp-manager/{Guid}

Eg: https://vconnect.cloudassertrp.onmicrosoft.com/azs/multi-stamp-manager/a694402b-7fdc- 4d89-bc15-06c6e380adf0

• Replace {DirectoryTenantName} and {Guid}

• Guid can be obtained by running the below powershell commands

Param	Description
DirectoryTenantName	Directory tenant name in which the service administrator account resides

$resourceManagerUri="<Replce Here>"
$applicationGuid = ([System.Guid]::NewGuid()).Guid
if ($resourceManagerUri -and $resourceManagerUri.Segments.Count -eq 2) {
try { 
$applicationGuid = [System.Guid]::Parse($resourceManagerUri.Segments[0].ToString()) } catch {}
}
Write-Output $applicationGuid 

7. Click on Set

8. Enter the URI framed in Step 6 and Click Save.

9. Find the Application Id of the Application named ‘Azure Stack - Administration’ which is created during the Azure Stack Hub stamp deployment.

10. Ensure the Home page URL in the Branding & properties section and the new Azure Stack Hub stamp ARM endpoint url are same.

11. Note down the Application Id of the application ‘Azure Stack - Administration’

12. Go to the application ‘Cloud Assert VConnect SPN Stamp 4’ created on Step 4.

13. Click 'API permissions' from the left pane.

14. Click Add a permission.

15. Click APIs my organization uses and search for the Application Id of the application ‘Azure Stack - Administration’ note down on Step 10.

16. Click on the application that matches the Application Id and check the permission as seen below and click the 'Add permissions' button.

17. Click on 'Certificates & secrets' from the left pane.

18. Click New client secret button. Provide a description and select the expiry as 24 months or more than 24 months

19. Copy the app secret text to a notepad since it will be hidden once the page is refreshed.

20. Login to Azure Stack admin portal with the service admin credentials.

21. Navigate to subscriptions and click on the 'Default Provider Subscription'

22. Click on Access control (IAM)

23. Click on the Add button and select Add role assignment

24. Select the Role as Contributor.

25. In the select field, search for the SPN “Cloud Assert VConnect SPN Stamp4” with the help of app id obtained in Step 5.

26. Click on the application and click the save button.

27. Proceed to create a connection to the new stamp.