# Integrating with Microsoft Azure #

You can configure an integration with the Microsoft Azure platform to allow IBM watsonx users access to data sources from Microsoft Azure\. Before proceeding, make sure you have proper permissions\. For example, you'll need permission in your subscription to create an application integration in Azure Active Directory\.

After you configure an integration, you'll see it under **Service instances**\. You'll see a new **Azure** tab that lists your instances of Data Lake Storage Gen1 and SQL Database\.

To configure an integration with Microsoft Azure:

<!-- <ol> -->

1.  Log on to your Microsoft Azure account at [https://portal\.azure\.com](https://portal.azure.com)\.
2.  Navigate to the **Subscriptions** panel and copy your subscription ID\.

<!-- </ol> -->

<!-- <ol> -->

1.  In IBM watsonx, go to **Administration > Cloud integrations** and click the **Azure** tab\. Paste the subscription ID you copied in the previous step into the **Subscription ID** field\.

<!-- </ol> -->

<!-- <ol> -->

1.  In Microsoft Azure Active Directory, navigate to **Manage > App registrations** and click **New registration** to register an application\. Give it a name such as *IBM integration* and select the desired option for supported account types\.

<!-- </ol> -->

<!-- <ol> -->

1.  Copy the **Application (client) ID** and the **Tenant ID** and paste them into the appropriate fields on the IBM watsonx **Integrations** page, as you did with the subscription ID\.

<!-- </ol> -->

<!-- <ol> -->

1.  In Microsoft Azure, navigate to **Certificates & secrets > New client secret** to create a new secret\.
    
    **Important\!**
    
    <!-- <ul> -->
    
     *  Write down your secret and store it in a safe place. After you leave this page, you won't be able to retrieve the secret again. You'd need to delete the secret and create a new one.
     *  If you ever need to revoke the secret for some reason, you can simply delete it from this page.
     *  Pay attention to the expiration date. When the secret expires, integration will stop working.
    
    <!-- </ul> -->
    
2.  Copy the secret from Microsoft Azure and paste it into the appropriate field on the **Integrations** page as you did with the subscription ID and client ID\.
3.  Configure [firewall access](https://dataplatform.cloud.ibm.com/docs/content/wsj/admin/int-azure.html?context=cdpaas&locale=en#firewall)\.
4.  Confirm that you can see your Azure services\. From the main menu, choose **Administration > Services > Services instances**\. Click the **Azure** tab to see those services\.

<!-- </ol> -->

Now users who have credentials to your Azure services can [create connections](https://dataplatform.cloud.ibm.com/docs/content/wsj/manage-data/create-conn.html) to them by selecting them on the **Add connection** page\. Then they can access data from those connections by [creating connected data assets](https://dataplatform.cloud.ibm.com/docs/content/wsj/manage-data/connected-data.html)\.

## Configuring firewall access ##

You must also configure access so IBM watsonx can access data through the firewall\.

For Microsoft Azure SQL Database firewall:

<!-- <ol> -->

1.  Open the database instance in Microsoft Azure\.
2.  From the top list of actions, select **Set server firewall**\.
3.  Set **Deny public network access** to **No**\.
4.  In a separate tab or window, open IBM watsonx and go to **Administration > Cloud integrations**\. In the **Firewall configuration** panel, for each firewall IP range, copy the start and end address values into the list of rules in the Microsoft Azure QL Database firewall\.

<!-- </ol> -->

For Microsoft Azure Data Lake Storage Gen1 firewall:

<!-- <ol> -->

1.  Open the Data Lake instance\.
2.  Go to **Settings > Firewall and virtual networks**\.
3.  In a separate tab or window, open IBM watsonx and go to **Administration > Cloud integrations**\. In the **Firewall configuration** panel, for each firewall IP range, copy the start and end address values into the list of rules under **Firewall** in the Data Lake instance\.

<!-- </ol> -->

You can now create connections, preview data from Microsoft Azure data sources, and access Microsoft Azure data in Notebooks, Data Refinery, SPSS Modeler, and other tools in projects and in catalogs\. You can see your Microsoft Azure instances under **Services > Service instances**\.

## Next steps ##

<!-- <ul> -->

 *  [Set up a project](https://dataplatform.cloud.ibm.com/docs/content/wsj/getting-started/projects.html)
 *  [Create connections in a project](https://dataplatform.cloud.ibm.com/docs/content/wsj/manage-data/create-conn.html)

<!-- </ul> -->

**Parent topic:**[Integrations with other cloud platforms](https://dataplatform.cloud.ibm.com/docs/content/wsj/admin/int-cloud.html)

<!-- </article "role="article" "> -->