Secure Upload Portal

Microsoft Entra ID Authentication • Authorization • Managed Identity • User Delegation SAS • Azure Blob Storage

1. Microsoft Entra Authentication

Sign in using an account from the configured Microsoft Entra tenant.

❌ Not Authenticated

Application Registration

Display Name Secure Upload Portal
Client ID 13965de8-2f40-47b1-bdf8-072cca8e008e
Tenant ID f881f52b-d29a-447c-8073-d655d42764fa
Redirect URI https://upload.qesaty.ae/

2. Authorization

Authentication proves the user's identity. Authorization will decide whether the authenticated user is permitted to upload files.

⏳ Phase 3 - Not Configured

3. Azure Blob Storage

Azure Blob Storage will store uploaded documents.

⏳ Not Connected

4. Managed Identity

The IIS VM will later authenticate to Azure using its Managed Identity instead of a storage account key.

⏳ Not Configured

5. User Delegation SAS

The backend will eventually generate a short-lived, blob-scoped User Delegation SAS.

⏳ Not Generated

6. File Upload

File upload remains disabled until authentication, authorization, Managed Identity, and SAS generation are configured.

⏳ Upload Disabled

Project Progress

Component Status
Azure VM ✔ Completed
IIS Website ✔ Completed
Domain / HTTPS ✔ Completed
Microsoft Entra App Registration ✔ Completed
Microsoft Entra Authentication Testing
Authorization Pending
Azure Blob Storage Pending
Managed Identity Pending
User Delegation SAS Pending
Blob Upload Pending