Generates base64-encoded JSON string for Pomerium IDP_SERVICE_ACCOUNT for Azure Active Directory identity provider

encode.sh

# The below command used the Base64 encoding utility to encode the JSON document 
# and return the encoded output required for the IDP_SERVICE_ACCOUNT value. 
#
# The JSON document requires the following key/value pairs available from
# the app registration
#
# client_id: The unique identifier of the Application (client) ID.
# client_secret: The client secret value generated in certificates & secrets. 
# directory_id: The unique identifier of the Directory (tenant) ID.

base64 -w 0 idp_service-account.json

idp_service_account.json

{
  "client_id": "{{ client_id }}",
  "client_secret": "{{ client_secret }}",
  "directory_id": "{{ directory_id }}"
}

pomerium.yml

# https://www.pomerium.com/docs/identity-providers/azure

idp_service_account = {{ base_64_encoded_string }}