Key Vault Retrieve for Plugin in Dataverse
✅ 1. Client Secret (Azure AD App Secret) This is used for authentication . What it is A client secret belongs to an App Registration in Azure AD. Think of it as: “The password of an application.” Used for ✔ Proving the identity of your Azure AD Application ✔ Getting an access token from Azure AD ✔ Allowing your Dataverse plugin to say: “Hi Azure AD, I am App XYZ. Here’s my password. Please let me access Key Vault.” Without the client secret You cannot authenticate → You cannot access Key Vault → You get 401 Unauthorized . ✅ 2. Key Vault Secret (Stored Secret) This is the actual secret you want to retrieve from Key Vault. Examples API keys Database connection strings Access tokens Certificates Any sensitive data you stored in the vault Used for ✔ Being protected in Key Vault ✔ Retrieved only after authentication ✔ Not related to Azure AD login password This is what the Key Vault returns only if the caller is authorized . 🔥 Key Diff...