integration-manifest.json

{
  "$schema": "https://keyfactor.github.io/integration-manifest-schema.json",
  "name": "Azure App Registration and Enterprise Application Orchestrator",
  "integration_type": "orchestrator",
  "status": "production",
  "description": "The Azure App Registration and Enterprise Application Orchestrator extension remotely manages both Azure App Registration/Application certificates and Enterprise Application/Service Principal certificates.",
  "support_level": "kf-supported",
  "release_dir": "AzureEnterpriseApplicationOrchestrator\\bin\\Release",
  "release_project": "AzureEnterpriseApplicationOrchestrator/AzureEnterpriseApplicationOrchestrator.csproj",
  "link_github": true,
  "update_catalog": true,
  "about": {
    "orchestrator": {
      "UOFramework": "10.4",
      "pam_support": false,
      "store_types": [
        {
          "Name": "Azure App Registration (Application)",
          "ShortName": "AzureApp",
          "Capability": "AzureApp",
          "LocalStore": false,
          "ClientMachineDescription": "The Azure Tenant (directory) ID that owns the Service Principal.",
          "StorePathDescription": "The Application ID of the target Application/Service Principal that will be managed by the Azure App Registration and Enterprise Application Orchestrator extension.",
          "SupportedOperations": {
            "Add": true,
            "Remove": true,
            "Enrollment": false,
            "Discovery": true,
            "Inventory": true
          },
          "Properties": [
            {
              "Name": "ServerUsername",
              "DisplayName": "Server Username",
              "Type": "Secret",
              "Description": "The Application ID of the Service Principal used to authenticate with Microsoft Graph for managing Application/Service Principal certificates.",
              "Required": true
            },
            {
              "Name": "ServerPassword",
              "DisplayName": "Server Password",
              "Type": "Secret",
              "Description": "A Client Secret that the extension will use to authenticate with Microsoft Graph for managing Application/Service Principal certificates, OR the password that encrypts the private key in ClientCertificate. If Client Cert Auth is used _and_ the Client Certificate's private key is not encrypted, you **must** select 'No Value' for this field.",
              "Required": false
            },
            {
              "Name": "ClientCertificate",
              "DisplayName": "Client Certificate",
              "Type": "Secret",
              "Description": "The client certificate used to authenticate with Microsoft Graph for managing Application/Service Principal certificates. See the [requirements](#client-certificate-or-client-secret) for more information. If Client Certificate Auth is not used, you **must** select 'No Value' for this field.",
              "Required": false
            },
            {
              "Name": "AzureCloud",
              "DisplayName": "Azure Global Cloud Authority Host",
              "Type": "MultipleChoice",
              "DefaultValue": "public,china,germany,government",
              "Description": "Specifies the Azure Cloud instance used by the organization.",
              "Required": false
            },
            {
              "Name": "ServerUseSsl",
              "DisplayName": "Use SSL",
              "Type": "Bool",
              "DefaultValue": "true",
              "Description": "Specifies whether SSL should be used for communication with the server. Set to 'true' to enable SSL, and 'false' to disable it.",
              "Required": true
            }
          ],
          "PasswordOptions": {
            "EntrySupported": false,
            "StoreRequired": false,
            "Style": "Default"
          },
          "PrivateKeyAllowed": "Forbidden",
          "ServerRequired": true,
          "PowerShell": false,
          "BlueprintAllowed": false,
          "CustomAliasAllowed": "Required"
        },
        {
          "Name": "Azure Enterprise Application (Service Principal)",
          "ShortName": "AzureSP",
          "Capability": "AzureSP",
          "LocalStore": false,
          "ClientMachineDescription": "The Azure Tenant (directory) ID that owns the Service Principal.",
          "StorePathDescription": "The Application ID of the target Application/Service Principal that will be managed by the Azure App Registration and Enterprise Application Orchestrator extension.",
          "SupportedOperations": {
            "Add": true,
            "Remove": true,
            "Enrollment": false,
            "Discovery": true,
            "Inventory": true
          },
          "Properties": [
            {
              "Name": "ServerUsername",
              "DisplayName": "Server Username",
              "Type": "Secret",
              "Description": "The Application ID of the Service Principal used to authenticate with Microsoft Graph for managing Application/Service Principal certificates.",
              "Required": true
            },
            {
              "Name": "ServerPassword",
              "DisplayName": "Server Password",
              "Type": "Secret",
              "Description": "A Client Secret that the extension will use to authenticate with Microsoft Graph for managing Application/Service Principal certificates, OR the password that encrypts the private key in ClientCertificate. If Client Cert Auth is used _and_ the Client Certificate's private key is not encrypted, you **must** select 'No Value' for this field.",
              "Required": false
            },
            {
              "Name": "ClientCertificate",
              "DisplayName": "Client Certificate",
              "Type": "Secret",
              "Description": "The client certificate used to authenticate with Microsoft Graph for managing Application/Service Principal certificates. See the [requirements](#client-certificate-or-client-secret) for more information. If Client Certificate Auth is not used, you **must** select 'No Value' for this field.",
              "Required": false
            },
            {
              "Name": "AzureCloud",
              "DisplayName": "Azure Global Cloud Authority Host",
              "Type": "MultipleChoice",
              "DefaultValue": "public,china,germany,government",
              "Description": "Specifies the Azure Cloud instance used by the organization.",
              "Required": false
            },
            {
              "Name": "ServerUseSsl",
              "DisplayName": "Use SSL",
              "Type": "Bool",
              "DefaultValue": "true",
              "Description": "Specifies whether SSL should be used for communication with the server. Set to 'true' to enable SSL, and 'false' to disable it.",
              "Required": true
            }
          ],
          "PasswordOptions": {
            "EntrySupported": false,
            "StoreRequired": false,
            "Style": "Default"
          },
          "PrivateKeyAllowed": "Required",
          "ServerRequired": true,
          "PowerShell": false,
          "BlueprintAllowed": false,
          "CustomAliasAllowed": "Required"
        },
        {
          "Name": "Azure App Registration 2 (Application)",
          "ShortName": "AzureApp2",
          "Capability": "AzureApp2",
          "LocalStore": false,
          "ClientMachineDescription": "The Azure Tenant (directory) ID where the Application is instantiated",
          "StorePathDescription": "The Object ID of the target Application/App Registration that will be managed by the Azure App Registration and Enterprise Application Orchestrator extension.",
          "SupportedOperations": {
            "Add": true,
            "Remove": true,
            "Enrollment": false,
            "Discovery": true,
            "Inventory": true
          },
          "Properties": [
            {
              "Name": "ServerUsername",
              "DisplayName": "Server Username",
              "Type": "Secret",
              "Description": "The Application ID of the Service Principal used to authenticate with Microsoft Graph for managing Application/App Registration certificates.",
              "Required": true
            },
            {
              "Name": "ServerPassword",
              "DisplayName": "Server Password",
              "DependsOn": "ServerUsername",
              "Type": "Secret",
              "Description": "A Client Secret that the extension will use to authenticate with Microsoft Graph for managing Application/App Registration certificates. If Client Certificate Auth is used, you **must** select 'No Value'.",
              "Required": false
            },
            {
              "Name": "ClientCertificate",
              "DisplayName": "Client Certificate",
              "DependsOn": "ServerUsername",
              "Type": "Secret",
              "Description": "The client certificate used to authenticate with Microsoft Graph for managing Application/App Registrations certificates. See the [requirements](#client-certificate-or-client-secret) for more information. If Client Certificate Auth is not used, you **must** check 'No Value'.",
              "Required": false
            },
            {
              "Name": "ClientCertificatePassword",
              "DisplayName": "Client Certificate Password",
              "DependsOn": "ClientCertificate",
              "Type": "Secret",
              "Description": "The (optional) password that encrypts the private key in ClientCertificate.  If Client Certificate Auth is not used, you **must** check 'No Value'.",
              "Required": false
            },
            {
              "Name": "AzureCloud",
              "DisplayName": "Azure Global Cloud Authority Host",
              "Type": "MultipleChoice",
              "DefaultValue": "public,china,germany,government",
              "Description": "Specifies the Azure Cloud instance used by the organization.",
              "Required": false
            }
          ],
          "PasswordOptions": {
            "EntrySupported": false,
            "StoreRequired": false,
            "Style": "Default"
          },
          "PrivateKeyAllowed": "Forbidden",
          "ServerRequired": true,
          "PowerShell": false,
          "BlueprintAllowed": false,
          "CustomAliasAllowed": "Required"
        },
        {
          "Name": "Azure Enterprise Application 2 (Service Principal)",
          "ShortName": "AzureSP2",
          "Capability": "AzureSP2",
          "LocalStore": false,
          "ClientMachineDescription": "The Azure Tenant (directory) ID where the Service Principal is instantiated",
          "StorePathDescription": "The Object ID of the target Service Principal/Enterprise Application that will be managed by the Azure App Registration and Enterprise Application Orchestrator extension.",
          "SupportedOperations": {
            "Add": true,
            "Remove": true,
            "Enrollment": false,
            "Discovery": true,
            "Inventory": true
          },
          "Properties": [
            {
              "Name": "ServerUsername",
              "DisplayName": "Server Username",
              "Type": "Secret",
              "Description": "The Application ID of the Service Principal used to authenticate with Microsoft Graph for managing Service Principal/Enterprise Application certificates.",
              "Required": true
            },
            {
              "Name": "ServerPassword",
              "DisplayName": "Server Password",
              "DependsOn": "ServerUsername",
              "Type": "Secret",
              "Description": "A Client Secret that the extension will use to authenticate with Microsoft Graph for managing Service Principal/Enterprise Application certificates. If Client Certificate Auth is used, you **must** check 'No Value'.",
              "Required": false
            },
            {
              "Name": "ClientCertificate",
              "DisplayName": "Client Certificate",
              "DependsOn": "ServerUsername",
              "Type": "Secret",
              "Description": "The client certificate used to authenticate with Microsoft Graph for managing Service Principal/Enterprise Application certificates. See the [requirements](#client-certificate-or-client-secret) for more information. If Client Certificate Auth is not used, you **must** check 'No Value'.",
              "Required": false
            },
            {
              "Name": "ClientCertificatePassword",
              "DisplayName": "Client Certificate Password",
              "DependsOn": "ClientCertificate",
              "Type": "Secret",
              "Description": "The (optional) password that encrypts the private key in ClientCertificate. If Client Certificate Auth is not used or the certificate's private key is not encrypted, you **must** check 'No Value'.",
              "Required": false
            },
            {
              "Name": "AzureCloud",
              "DisplayName": "Azure Global Cloud Authority Host",
              "Type": "MultipleChoice",
              "DefaultValue": "public,china,germany,government",
              "Description": "Specifies the Azure Cloud instance used by the organization.",
              "Required": false
            }
          ],
          "PasswordOptions": {
            "EntrySupported": false,
            "StoreRequired": false,
            "Style": "Default"
          },
          "PrivateKeyAllowed": "Required",
          "ServerRequired": true,
          "PowerShell": false,
          "BlueprintAllowed": false,
          "CustomAliasAllowed": "Required"
        }
      ]
    }
  }
}