---
title: "test Azure Key Vault connection"
method: POST
path: "/settings/test_azure_kv_backend"
tags: ["setting"]
---

# test Azure Key Vault connection

`POST /settings/test_azure_kv_backend`

## Request body

- AzureKeyVaultSettings
  - `vault_url` string, required — Azure Key Vault URL (e.g., https://myvault.vault.azure.net)
  - `tenant_id` string, required — Azure AD tenant ID
  - `client_id` string, required — Azure AD application (client) ID
  - `client_secret` string — Azure AD client secret. Optional — when omitted, the integration falls back to Azure Workload Identity Federation, exchanging the Kubernetes-projected service-account JWT at AZURE_FEDERATED_TOKEN_FILE for an access token (no long-lived secret stored).
  - `token` string — Static Bearer token for testing/development (optional, if provided this is used instead of OAuth2 authentication)

## Response `200`

connection successful

---

[API](https://skmtc.net/windmill/apis/windmill-api.md) · [All operations](https://skmtc.net/windmill/apis/windmill-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/windmill/windmill-api/revisions/964225251155/schema)