Device Code Authentication Method

Overview

The Device Code authentication method is the default and recommended option for running Lucidity Assessment on Azure from Dashboard App. This method ensures that the app has the required permissions to securely access your Azure resources without storing any credentials. The user signs in using an Azure login screen that prompts them to enter a secret “Device Code”. Lucidity Assessment App obtains a short-lived access token to read required metadata using the signed-in user's existing permissions.

Step 1: Choose Authentication Method

Choose authentication method as Authorization Code as described in image below.

Step 2: Provide Tenant ID

Enter the Azure Tenant Id on which you wish to run the Assessment. You can retrieve the Tenant ID directly from the Azure Portal:

1. Sign in to the Azure Portal.

2. In the left-hand navigation menu, click Microsoft Entra ID (or search for “Microsoft Entra ID” in the search bar).

3. On the Overview page, you’ll see your Tenant ID (Directory ID) displayed under Basic Information.

   

4. Click the copy icon next to the Tenant ID to copy it to your clipboard and input to Lucidity Assessment App

   

Step 3: Input Company Name or Workload Identifier [on Desktop App Only]

Enter your Company Name or a meaningful Identifier representing the workload or environment under assessment (for example: Finance-Prod, ECommerce-West). This helps Lucidity organize and tag your assessment  data for reporting.

Step 4: Select Subscriptions to Run Assessment

You may choose to run the Assessment on either all the available subscriptions under this tenant (recommended) or you can manually enter a few select subscriptions.

Note

Include your at least top 10 highest-spend subscriptions, or those contributing to ~80% of your cloud costs, for a comprehensive optimization view.

Step 5: Optionally Modify Assessment Scope

Optionally, modify the Assessment Scope to choose between Comprehensive Permission Mode or Essential Permission Mode.

Step 6: Initiate Assessment and Authenticate

• Keep checkboxes as default to allow auto-upload of assessment reports. Click Initiate Assessment. For Dashboard App, these are checked by default.

  

• Once Device Code is generated, copy and verify identity to grant access.

  

• Enter the code on Microsoft Login Page and click Next.

  

• Complete authentication on Azure Portal and grant Access.

  

• Once permission verification completes, assessment initiates.

  

• Once all the VMs have been processed, the Assessment report will be uploaded to Lucidity. The insights from the Assessment will be made available on the Lucidity Assessment Dashboard once the report has been processed.

Step 7: Upload Assessment Results to Lucidity [Optional]

For Desktop Application Based Assessment, you might choose not to share Metadata at time of initiating assessment. If so, you can Zip  the content of folder Lucidity_Assessment where Assessment App was initiated and shared with Lucidity over mail or through Lucidity Dashboard by Clicking Upload Assessment on Lucidity Assessment Dashboard.

Note

Currently, the max file size that can be uploaded automatically via the app is 1000 MB. If the size of the zip file that has been generated is greater than 1000 MB, please reach out to us and we will share a secure S3 location where the file can be uploaded.