ColdSend Logo
ColdSend
HomeFeaturesPricing
Contact UsGet Started
Help Center/Infrastructure
Infrastructure

Azure BYOK Setup Guide

Learn how to set up Azure credentials (Tenant ID, Client ID, Client Secret) to connect your Azure account to ColdSend

Last updated: February 15, 2026

You need to add the following fields:

  1. Account Name - A friendly name for the account
  2. Tenant ID (Directory ID) - The Azure AD tenant identifier
  3. Client ID (Application ID) - the App Registration's application ID
  4. Client Secret - A secret key for authentication

Here's a guide on how to obtain these values:


Azure Service Principal Credentials Guide

This guide will walk you through obtaining the required credentials to connect your Azure account to ColdSend.

Prerequisites


Step 1: Get Your Tenant ID

The Tenant ID (also called Directory ID) identifies your Azure Active Directory.

  1. Go to Azure Portal

  2. Navigate to Microsoft Entra ID (or Azure Active Directory)

  3. Click Overview in the left sidebar

  4. Copy the Tenant ID (a GUID like xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx)

    Get Tenant ID


Step 2: Register an Application

To get the Client ID and create a Client Secret, you need to register an application:

  1. In Azure Portal, go to Microsoft Entra ID
  2. Click App registrations in the left sidebar
  3. Click + New registration
  4. Enter a Name (e.g., "ColdSend Service")
  5. Under Supported account types, select:
    • Accounts in this organizational directory only (Single tenant)
  6. Click Register

Register App

App Registration

Copy the Client ID

After registration, you'll see the Overview page:

  • Copy the Application (client) ID — this is your Client ID

Copy Client ID


Step 3: Create a Client Secret

  1. In your App registration, click Certificates & secrets in the left sidebar

  2. Click + New client secret

  3. Add a Description (e.g., "ColdSend Inboxes")

  4. Select an Expires duration:

    • Recommended: 24 months (you'll need to rotate this before it expires)
  5. Click Add

  6. Immediately copy the secret value — it will only be shown once!

⚠️ Important: Store this secret securely. If you lose it, you'll need to create a new one.

Create Client Secret


Step 4: Assign Required Permissions

Your service principal needs permissions to manage Azure Communication Services:

Add API Permissions

  1. In your App registration, click API permissions

  2. Click + Add a permission

  3. Select Azure Service Management

  4. Select Delegated permissions

  5. Check user_impersonation

  6. Click Add permissions

    API Permissions 1

    API Permissions 2

Assign Role to Subscription

  1. Go to Azure PortalSubscriptions

  2. Select the subscription you want to use

  3. Click Access control (IAM) in the left sidebar

  4. Click + AddAdd role assignment

  5. Select the Contributor role

  6. Click Next

  7. Under Assign access to, select User, group, or service principal

  8. Click + Select members

  9. Search for your app registration name (e.g., "ColdSend Service")

  10. Select it and click Review + assign

    Role Assignment 1

    Role Assignment 2

    Role Assignment 3

    Role Assignment 4


Step 5: Get Your Subscription ID

  1. In Azure Portal, go to Subscriptions
  2. Select the subscription you assigned the role to
  3. Copy the Subscription ID (a GUID)

Step 6: Enable Communication Services(Sometimes this service is not enabled by default)

  1. Go to Azure PortalSubscriptions
  2. Select your subscription
  3. Click Resource providers in the left sidebar (under Settings)
  4. Search for Microsoft.Communication
  5. If it's not registered, select it and click Register

Enter Credentials in ColdSend

Go to Email AccountsInfrastructure tab and enter:

FieldValue
Account NameAny friendly name (e.g., "Production Azure")
Tenant IDYour Directory/Tenant ID
Client IDYour Application (client) ID
Client SecretThe secret value you copied
Subscription IDYour Azure Subscription ID (added separately)

After entering credentials, click Verify to confirm everything is working correctly.


Troubleshooting

IssueSolution
"Authentication failed"Double-check all IDs are copied correctly (no extra spaces)
"Insufficient permissions"Ensure the Contributor role is assigned to your service principal
"Subscription not found"Verify the subscription ID and that the service principal has access

Security Best Practices

  • Rotate secrets regularly: Set a calendar reminder before the secret expires
  • Monitor usage: We store your azure keys in encrypted format and don't use it for any purposes other than setting up your domains and your inboxes.

Related Articles

Need more help?

Contact our support team for personalized assistance

Contact Support
ColdSend Logo
Cold email infra
without the infra.
EmailHello@coldsend.pro

Socials

© 2025 ColdSend. All rights reserved.