URL Shortening service
por Gilde-BT Software BV
A secure, Azure-native URL shortening service deployed into your own subscription with Entra ID auth
This offer deploys a customer-hosted URL shortening service into your Azure subscription as a Managed Application. The service consists of an Azure App Service (API) and an Azure Storage Account (Table Storage) for persistence. Storage access is handled via a system-assigned managed identity (RBAC), so no storage keys or secrets are stored in the application.
Authentication is based on Microsoft Entra ID (Bring Your Own App Registration) and is designed for service-to-service usage via client credentials (app-only).
Prerequisites
(Required before deployment)
Before you click Create, prepare the following in your Microsoft Entra
ID tenant:
- An App Registration for the API (single-tenant)
- Configure Expose an API and set the Application ID URI (Audience), for example: api://{api-app-client-id}
- Your Entra ID Tenant ID
- A calling client App Registration (the app/service that will call POST /shorten)
- Configure a client secret or certificate for client credentials flow
During installation you will be asked to provide:
- Tenant ID
- Audience (Application ID URI)
What gets deployed
- Azure App Service hosting the API:
- POST /shorten (secured, requires Bearer token)
- GET /{code} (public resolve endpoint)
- Azure Storage Account with Table Storage
- System-assigned managed identity with RBAC access to Table Storage
Optional
custom domain
You can optionally bind a custom domain (for branded short URLs). DNS
configuration is required and can be completed after the initial deployment;
the Managed Application exposes the required DNS values as outputs.
Intended users
- Platform and cloud engineers
- Development teams building internal tools or integrations
- Organizations that need a centrally managed URL shortener for automation, systems integration, or controlled sharing
Customer
needs addressed
This offer provides an Azure-native alternative to third-party URL shorteners,
enabling:
- Full ownership of infrastructure, data, and access control (customer subscription)
- Entra ID authentication for service-to-service scenarios
- Managed identity access to storage (no secrets)
- Optional custom domain for branded URLs
