Connect Azure Blob Storage
This guide walks you through connecting an Azure Storage Account to Slim.io using a Service Principal.
Time required: 5–10 minutes
Prerequisites:
- Azure Portal access with permissions to create app registrations
- A Storage Account with blob containers you want to scan
Step 1: Create an App Registration
- In the Azure Portal, go to Azure Active Directory > App registrations.
- Click New registration.
- Name:
slim-io-scanner. - Supported account types: Single tenant.
- Click Register.
- Note the Application (client) ID and Directory (tenant) ID from the Overview page.
Step 2: Create a Client Secret
- In the app registration, go to Certificates & secrets.
- Click New client secret.
- Description:
Slim.io Scanner. - Expiry: Choose your organization’s policy (6 months, 12 months, or 24 months).
- Click Add.
- Immediately copy the secret value — it will not be shown again.
The client secret is displayed only once when created. Copy it immediately. If lost, you must create a new secret and update the connector configuration.
Step 3: Grant Storage Access
- Navigate to your Storage Account in the Azure Portal.
- Go to Access control (IAM) > Add role assignment.
- Role: Storage Blob Data Reader.
- Members: Select the
slim-io-scannerapp registration. - Click Review + assign.
Step 4: Configure the Connector in Slim.io
- Navigate to Connectors > Add Connector in the Customer Dashboard.
- Select Microsoft Azure.
- Enter the Tenant ID (from Step 1).
- Enter the Client ID (from Step 1).
- Enter the Client Secret (from Step 2).
- Enter the Storage Account Name.
- Click Test Connection.
Step 5: Verify
A successful test shows:
- Green “Connected” status
- List of accessible containers
- Estimated blob count
Troubleshooting
| Issue | Solution |
|---|---|
| ”Authorization failed” | Verify Tenant ID and Client ID are correct; confirm the client secret has not expired |
| ”Storage account not found” | Check the storage account name (case-sensitive) |
| “Forbidden” | Ensure you assigned Storage Blob Data Reader (not just Reader) on the storage account |
Next Steps
Last updated on