---
title: "Data Lake Gen2 Client Secret Integration"
slug: "azure-datalake-gen2-1"
updated: 2025-10-22T11:47:17Z
published: 2025-10-22T11:47:17Z
canonical: "docs.dataloop.ai/azure-datalake-gen2-1"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.dataloop.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Data Lake Gen2 Client Secret Integration

## Overview

The Azure Data Lake Gen2 integration process involves the following steps:

![](https://cdn.document360.io/53f32fe9-1937-4652-8526-90c1bc78d3f8/Images/Documentation/ms_azure_integration_data_lake.png)

> [!NOTE]
> Who Can Create?
> 
> Only users with the Organization **Admin** or **Owner** roles are authorized to create integrations. [Learn more](https://docs.dataloop.ai/docs/org-members-groups#org-role-permissions)

## 1. Register an App in Microsoft Azure

1. Open [Microsoft Azure](https://portal.azure.com/#home) and search for the **App registrations** in the search bar.
2. Click **App registrations**.
3. Click **+New registration** and enter a name for your application.
4. Note the **Application (client) ID** and the **Directory (tenant) ID** from the Application overview page, which are required for the integration.

---

## 2. Create a Client Secret

1. Once you create an application, on the left-side panel navigate to **Certificates & secrets**.
2. Click **+New client secret** to create a new secret for the application.
3. Enter a description for the client secret.
4. Select a timeframe from the list when the integration expires (the recommended setting is the longest period).
5. Click **Add**. A confirmation message is displayed, and the client secret is added to the application.

          Important

          

Copy the secret **value** and store it for later use, because you cannot access it again. The secret value is required in the Integration phase.

---

## 3. Create a Storage Account

1. Open [Microsoft Azure](https://portal.azure.com/#home) and search for the Storage accounts in the search bar.
2. Select a Storage account or create a new account if you do not have one.
3. When you create Storage Account under the Advanced tab, go to **Data Lake Storage Gen2** and mark **Enable hierarchical namespace**. See [Create a Storage account](https://learn.microsoft.com/en-us/azure/storage/common/storage-account-create?tabs=azure-portal) for more information on creating a storage account in Azure.

---

## 4. Create a Container

1. Open [Microsoft Azure](https://portal.azure.com/#home) and search & select **Storage accounts** in the search bar.
2. Select the desired Storage account from the list.
3. Select **Containers** from the left portal menu.
4. Choose the desired Container from the list, or see [Create a container](https://learn.microsoft.com/en-us/azure/storage/blobs/storage-quickstart-blobs-portal#create-a-container) to create a container.

---

## 5. Add an IAM Role Assignments to the Container

1. Select the chosen container, the one you will integrate with Dataloop. Refer to the previous section to view the instructions to identify or create a container.
2. From the left portal menu, select **Access Control (IAM)**.
3. Click **Add**.
4. Select **Add role assignment**.
5. Search and select **Storage Data Contributor** from the **Role** list, and click **Next**.
6. Under Members section, make sure **Assign access to**” is set to **User, group, or service principals**.
7. Under Members section, click on **Select members**.
8. On the search bar enter your registration app’s name which you created earlier, choose it and click **Select**.
9. Click **Review+sign**.

          **Note**: It takes up to 5 minutes to update the permissions to use in Dataloop. To set up a policy in Azure, see [Setup Azure Policy](https://docs.dataloop.ai/docs/data-management-help#how-do-i-setup-azure-policy).

          

---

## 6. Create the Azure Client Secret Integration

> [!NOTE]
> Who Can Create?
> 
> Only users with the Organization **Admin** or **Owner** roles are authorized to create integrations. [Learn more](https://docs.dataloop.ai/docs/org-members-groups#org-role-permissions)

1. Log in to the Dataloop platform.
2. From the left-side panel, select **Integrations**.
3. Click **Create Integration** -> **Create Storage Integration**. A pop-up window is displayed.

![](https://cdn.document360.io/53f32fe9-1937-4652-8526-90c1bc78d3f8/Images/Documentation/integrations_create_azure_datalake_gen2.png)

1. **Integration Name**: Enter a **Name** for the integration.
2. **Provider**: Select **Azure** from the list.
3. **Integration Type**: Select the **Client Secret** from the list.
4. **Account Name**: Enter your storage account **Name** where the container is located.
5. **Application (Client) ID**: Enter the registration app client ID that you noted while registering an application earlier.
6. **Directory (Tenant) ID**: Enter the registration app tenant ID that you noted while registering the application earlier.
7. **Client Secret**: Enter the client secret’s value that you noted while creating the new client secret.
8. Click **Create Integration**. A confirmation message is displayed.

---

## 7. Create an Azure Data Lake Gen2 Storage Driver

To create, see the [Create an Azure Data Lake Gen2 Storage Driver](https://docs.dataloop.ai/docs/create-storage-drivers#create-azure-data-lake-gen2-storage-drivers) topic.