Sync tool source: https://github.com/hornbill/goAzure2HUserImport

Hornbill Wiki: https://wiki.hornbill.com/index.php/Azure_User_Import

See: https://docs.microsoft.com/en-us/azure/azure-app-configuration

Fill out the required fields in the json configuration file and copy the contents into a new key called 'BasicUserSync'

Minimum required fields in addtion to example conftemplate.json:

• APIKey
• InstanceId
• AzureConf.Tenant
• AzureConf.ClientID
• AzureConf.ClientSecret
• AzureConf.UsersByGroupID.ObjectID
• AzureConf.UsersByGroupID.Name

Also add Azure File account details for log upload:

• azfileaccount
• azfileuser
• azfilepass

Login az cli or use cloud shell...

git clone 'https://github.com/WebedMJ/Hornbill-Az-Import'
cd '/home/<username>/Hornbill-Az-Import'
ACR_NAME=myacr
az acr build --registry $ACR_NAME --platform windows --image hornbillazimport:v1 .

Note trailing '.' for source location!

Pass following environment variables to container at runtime:

• cfguri -> URL for Azure App Configuration (https://myappconfig.azconfig.io)
• cfgid -> Azure App Configuration Access Key Id
• cfgsecret -> Azure App Configuration Access Key Secret
• cfgkey -> Azure App Configuration Key name to retrieve json config

Read only access key is sufficient

Tutorial: Build and deploy container images in the cloud with Azure Container Registry Tasks - also shows using service principals and keyvault.

To do this with Azure CLI:

# vars
RES_GROUP=myrg
ACR_NAME=myreg
acrloginserver=myreg.azurecr.io
AKV_NAME=mykv-acr-vault

# Create container, assumes registry with admin user enabled and credentials stored in Key Vaul as per MS ACR tutorial...
az container create --resource-group $RES_GROUP --name az2hbsync --image myreg.azurecr.io/hornbillazimport:v1 \
--cpu 1 --memory 1.5 --registry-login-server $acrloginserver \
--registry-username $(az keyvault secret show --vault-name $AKV_NAME --name $ACR_NAME-pull-usr --query value -o tsv) \
--registry-password $(az keyvault secret show --vault-name $AKV_NAME --name $ACR_NAME-pull-pwd --query value -o tsv) \
--location uksouth --os-type Windows --restart-policy Never --no-wait \
--secure-environment-variables 'cfguri'='https://myapponfig.azconfig.io' 'cfgid'='accesskeyid' 'cfgsecret'='accesskeysupersecret' 'cfgkey'='BasicUserSync'

See https://docs.microsoft.com/en-us/azure/container-registry/container-registry-tasks-overview

You can use Run-az2hbsync-aci.ps1 as a runbook with a linked schedule to run the container, it will terminate after each sync.

Import the AzureACIAuth and AzureACIREST modules from https://github.com/WebedMJ/PSAzureREST

Required Automation account variables:

Example variables to pass with the linked schedule: