> ## Documentation Index
> Fetch the complete documentation index at: https://docs.unstructured.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Enterprise Connect for Azure

> Enterprise Connect lets Unstructured connectors access Azure resources by authenticating as a customer-configured App Registration using short-lived access tokens.

<Note>
  Enterprise Connect is available for [dedicated instance](/business/dedicated-instances/overview) customers only. Contact your Unstructured account team or [Unstructured Support](https://support.unstructured.io/) to have it enabled on your instance.
</Note>

## Enterprise Connect credential model

Enterprise Connect is an authentication method for Azure connectors. It uses a federated identity credential to authenticate Unstructured as a customer-configured App Registration. During a workflow run, Unstructured uses this credential to receive a short-lived access token. Tokens expire automatically and no secrets are stored.

A **federated identity credential** is a trust configuration in Microsoft Entra ID. An **App Registration** is an application identity in Microsoft Entra ID.

## Supported Azure connectors

Enterprise Connect supports the following Azure connectors:

* Azure AI Search
* Azure Blob Storage

## How Enterprise Connect works

Enterprise Connect requires setup in your Azure subscription. You create an App Registration and add a federated identity credential configured to trust tokens issued by Unstructured. You then assign a role-based access control (RBAC) role on each Azure resource you want the connector to access. No secrets or passwords are exchanged during setup.

When a workflow runs, Unstructured exchanges that short-lived token with Microsoft Entra ID (formerly Azure AD) for an access token. Unstructured uses the token for that operation only and never stores it. Tokens expire automatically.

## Setup requirements

Enterprise Connect requires the following:

* A dedicated instance provisioned for your Unstructured account, with Enterprise Connect enabled. Contact your Unstructured account team or [Unstructured Support](https://support.unstructured.io/) to request access and have it enabled.
* An Azure subscription with permissions to create App Registrations and add Azure RBAC role assignments.

## Configure your connector

Select your preferred interface (Pipelines or API) to view setup instructions for your connector.

<Note>
  A connector configured with Enterprise Connect is available only in the workspace where it was created. It is not accessible from other workspaces in your Unstructured account.
</Note>

| Connector          | Source                                                                                                                                                                                            | Destination                                                                                                                                                                                                 |
| ------------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Azure AI Search    | N/A                                                                                                                                                                                               | [Pipelines](/pipelines/destinations/azure-ai-search#set-up-enterprise-connect-authentication) \| [API](/api-reference/workflow/destinations/azure-ai-search#set-up-enterprise-connect-authentication)       |
| Azure Blob Storage | [Pipelines](/pipelines/sources/azure-blob-storage#set-up-enterprise-connect-authentication) \| [API](/api-reference/workflow/sources/azure-blob-storage#set-up-enterprise-connect-authentication) | [Pipelines](/pipelines/destinations/azure-blob-storage#set-up-enterprise-connect-authentication) \| [API](/api-reference/workflow/destinations/azure-blob-storage#set-up-enterprise-connect-authentication) |