Enterprise Connect for Azure

​

Enterprise Connect credential model

Enterprise Connect is an authentication method for Azure connectors. It uses a federated identity credential to authenticate Unstructured as a customer-configured App Registration. During a workflow run, Unstructured uses this credential to receive a short-lived access token. Tokens expire automatically and no secrets are stored. A federated identity credential is a trust configuration in Microsoft Entra ID. An App Registration is an application identity in Microsoft Entra ID.

​

Supported Azure connectors

Enterprise Connect supports the following Azure connectors:

• Azure AI Search
• Azure Blob Storage

​

How Enterprise Connect works

Enterprise Connect requires setup in your Azure subscription. You create an App Registration and add a federated identity credential configured to trust tokens issued by Unstructured. You then assign a role-based access control (RBAC) role on each Azure resource you want the connector to access. No secrets or passwords are exchanged during setup. When a workflow runs, Unstructured exchanges that short-lived token with Microsoft Entra ID (formerly Azure AD) for an access token. Unstructured uses the token for that operation only and never stores it. Tokens expire automatically.

​

Setup requirements

Enterprise Connect requires the following:

• A dedicated instance provisioned for your Unstructured account, with Enterprise Connect enabled. Contact your Unstructured account team or Unstructured Support to request access and have it enabled.
• An Azure subscription with permissions to create App Registrations and add Azure RBAC role assignments.

​

Configure your connector

Select your preferred interface (Pipelines or API) to view setup instructions for your connector.