You can store cryptographic keys and secrets in Azure Key Vault, which can be used by various Azure services and custom applications. Azure uses it for storing keys for Azure Storage Service Encryptions and Azure Disk Encryption, which are covered later in this chapter. However, for instance, you can store your App client ID and secret in there as well and retrieve this inside your custom application. This way, you don't have to store these IDs and secrets in your web.config anymore, and they can be managed from one place, where it is secured and protected, inside the Azure Portal. You can store certificates and other authentication keys in there as well, and it offers a monitoring solution for key usage. Azure Key Vault is integrated with Azure AD, so you can set access policies on different users and groups to access the keys that are stored in there.
Azure...