Azure Prerequisites and Roles

Planning for deployment of the Salem Azure Application

Azure Prerequisites

Salem is deployed as an Azure Application and requires Entra ID OAuth configuration. This means in order to deploy Salem, you must first have an existing Azure Cloud and Entra ID instance.

Azure Subscription and Resource Group

Salem will be deployed into an Azure Subscription and Resource Group like any other Azure resource. Before attempting to deploy Salem, identify the existing Subscription and Resource Group where Salem will be deployed. It's recommended that Salem admins have owner permission over the resource group Salem will be deployed into. This will allow them to to support post-deployment configuration and optimization of Salem resources.

Azure Locations

Salem can currently be deployed in any US Azure Data Center, including Azure Government. Salem recommends deploying to US South Central or US Central Data Centers. Some Azure regions such as US East experience regular capacity constraints on specific compute and storage inspaces which will if in effect at the type of Salem deployment, cause the deployment to fail.

Entra ID Application

While other IDPs are supported, it's recommended to configure Salem with Entra ID OAuth for user authentication. Before you install Salem, you will need to create an Entra ID Application. It's recommended that the Salem administrators have owner permission of this Application. This will allow admins to manage the application secret which will need to be periodically rotated due to secret expiry.