Access from Proximus network

For the Location Analytics use cases IoT Data Engine has to ingest data that is coming from the Proximus network. In order to achieve it there is a configuration done through the Perimeter Gateway.

Data flow: BDP_ATS -> PGCF -> Azure

• BDP_ATS - the application generating data in the Proximus network
• PGCF - Perimeter Gateway Corpo Fabric - outbound gateway for Proximus network

The security connection between BDP_ATS and PGCF is set to mTLS. Then the PGCF is using credentials of Service Principal created by O365 Ops Team in order to login to Azure AD and obtain the token. From IoT Data engine perspective, the Pulumi script is adding role of Storage Account Blob Data Contributor to the created Service Principal.