Skip to main content
Azure Container Registry (ACR) is Microsoft Azure’s managed Docker registry service. CybeDefend integrates with ACR to scan your container images using Service Principal authentication.

​
CybeDefend Configuration

FieldDescriptionExample
Login ServerYour ACR login server URLmyregistry.azurecr.io
Service Principal App IDApplication (client) ID of the service principalxxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
Service Principal PasswordService principal password/secret*****
DescriptionOptional description for the registryProduction ACR registry

​
How to Get Azure Container Registry Credentials

​
Option A: Admin User (Quick Setup)

1

Access Azure Portal

Go to Azure Portal → Container Registries → Select your registry
2

Enable Admin User

Go to Settings → Access keys → Enable Admin user
3

Copy Credentials

Copy the username and password provided
1

Create Service Principal

Create a Service Principal with the AcrPull or AcrPush role
2

Assign Role

Assign the Service Principal to your ACR with appropriate permissions
3

Enter Credentials

Enter the Service Principal App ID and password in CybeDefend
Using Admin User is convenient for testing but Service Principal is recommended for production environments.

​
Security Best Practices

Use Service Principals

Prefer Service Principals over Admin User for production environments.

AcrPull Role

Use the minimal AcrPull role for scanning operations only.

Rotate Secrets

Rotate Service Principal secrets regularly to minimize exposure.

Use Managed Identities

When running in Azure, prefer Managed Identities for authentication.

​
Troubleshooting

  • Verify Service Principal App ID and password are correct
  • Check if the client secret has expired
  • Ensure the login server URL is correct
  • Verify the Service Principal has AcrPull role
  • Check RBAC assignments on the registry