Set up Data Sync with Microsoft Azure Storage

Pendo Data Sync provides the ability to export Pendo data (excluding Pendo Feedback data) to your Microsoft Azure Storage account. This article describes how to set up Data Sync with Microsoft Azure Storage.

Prerequisites

• Data Sync is a paid feature. Contact your Pendo representative for access.
• You must be a subscription admin in Pendo to set up a destination as part of this process.

Setup overview

Data Sync with Microsoft Azure Storage is set up in Pendo and configured in your Microsoft Azure environment. It involves the following steps:

1. Create a client ID and a client secret for accessing the storage account.
2. Create an Azure Storage account.
3. Set up permissions.
4. Create an Azure container inside the storage account.
5. Choose a provider in Pendo.
6. Configure your storage account destination in Pendo.

Step 1. Generate a client key

To authenticate with Azure, you must you must register Pendo as an application in your Microsoft Azure Storage account and create a client secret (key) for it. To generate this key, navigate to Azure Active Directory and then:

1. Select App registrations under Manage in the left-side menu.
2. Select + New registration at the top of the page to start the process of registering a new application.
3. Complete the form and then select Register at the bottom to create an application. This takes you to the application's details page. If not, navigate back to App registrations under Manage in the left-side menu and open the application you just added.
4. In the application details page, take note of the values for Application (client) ID and Directory (tenant) ID in the Essentials section. These IDs are needed for Pendo in Step 6 of this article. 
5. Select Certificates & secrets from the left-side menu in the application details page, open the Client secrets tab, and select + New client secret.
6. Enter a description that summarizes its use for Pendo Data Sync, and choose an expiration policy that matches your internal policies.
7. Select Add at the bottom of the form.
8. Take note of the string in the Value column. This is the client secret needed for Pendo in Step 6 of this article. The value is only visible for a limited time.

Step 2. Create an Azure Storage account

Pendo data is copied to an Azure Storage account as blobs. To create an Azure storage account, navigate to Storage accounts in Microsoft Azure and then:

1. Select + Create from the top left of the page.
2. Starting in the Basics tab, follow the workflow to configure the appropriate settings for your storage account.
3. Select Review and then Create at the bottom of the form.

Step 3. Set up permissions

In the storage account that you created in Step 2:

1. Select Access Control (IAM) from the left-side menu.
2. Select + Add and then Add role assignment.
3. In the Role tab, search for and select Storage Blob Data Contributor.
4. Open the Members tab.
5. Next to Assign access to, select User, group, or service principal.
6. Select + Select members and search for the client.

You can check your setup in the Role assignments tab.

Step 4. Create an Azure container

In the storage account that you created in Step 2:

1. Select Containers under Data storage in the left-side menu.
2. Select + Container from the top right of the page.
3. Create a meaningful name for the container.
4. Select an anonymity access level from the dropdown menu: Private, Blob, or Container.
5. Select Create at the bottom of the form.

Step 5. Choose a provider in Pendo

Before you can send data to your storage bucket, you must set a target destination in Pendo.

1. In Pendo, navigate to Settings > Data Management.

2. Select the Bulk Exports tab at the top and then Set Up Destination.

3. Hover over the Microsoft Azure Storage tile in the panel that slides out on the right, and then Select Provider. The panel then summarizes the next steps for you.

Step 6. Configure your storage account destination in Pendo

The final step is to configure your Microsoft Azure Storage destination in Pendo.

1. Enter the name for the storage account that you created in Step 2.
2. Enter the name of the container in that storage account that you created in Step 4.
3. Optionally, enter the storage path (subdirectory). If the main directory, the container, is sufficient as a location for exporting your files, leave this field blank.
4. Enter the tenant and client IDs that you took note of in Step 1.
5. Enter the secret (client key) created in Step 1.
6. Select Validate Destination to test the credentials you entered.
7. When successfully validated, select Create Destination.

Rotating credentials

There are two ways to update your credentials after you've configured an Azure destination in Pendo:

• Manually rotate credentials through the Pendo UI.
• Automatically rotate your credentials through the public API. 

To use the public API endpoint for rotating Data Sync credentials, you must have an integration key with write access.

Through the Pendo UI

1. In Pendo, navigate to Settings > Data Sync.
2. Select Manage Destination in the top-right corner of the page.
3. Provide new credentials.

Through the public API