Fixes for the App Role guide.

docs/vault-entra-id.md

@@ -5,7 +5,7 @@ This guide shows how an administrator configures the Vault OIDC authentication m
 ## Prerequisites
 
 - The Vault PKI configured as described in step 1a of the main `README.md`: the `pki_int` mount and the `wif-client` role (`vault_configure.sh`).
-- A Vault server reachable over HTTPS. The examples use `https://vault.example.com:8200`.
+- A Vault server reachable over HTTPS. The examples use `https://vault.koszewscy.waw.pl`.
 - Permissions to register applications in the Entra ID tenant.
 - `vault` and `openssl` on the workstation of the administrator and of the user, and a web browser on the workstation of the user.
 
@@ -19,7 +19,7 @@ Role: **Administrator**
 2. Add the redirect URIs of the type "Web":
 
     - `http://localhost:8250/oidc/callback` for the CLI login.
-    - `https://vault.example.com:8200/ui/vault/auth/oidc/oidc/callback` for the Vault UI login.
+    - `https://vault.koszewscy.waw.pl/ui/vault/auth/oidc/oidc/callback` for the Vault UI login.
 
 3. Record the **Application (client) ID** and the **Directory (tenant) ID**.
 4. Under **Certificates & secrets**, create a client secret and record its value.
@@ -34,7 +34,7 @@ Role: **Administrator**
 Point the CLI at the server and authenticate with an administrator token:
 
 ```bash
-export VAULT_ADDR=https://vault.example.com:8200
+export VAULT_ADDR=https://vault.koszewscy.waw.pl
 export VAULT_TOKEN=<admin-token>
 ```
 
@@ -72,7 +72,7 @@ path "pki_int/sign/wif-client" {
   "user_claim": "sub",
   "allowed_redirect_uris": [
     "http://localhost:8250/oidc/callback",
-    "https://vault.example.com:8200/ui/vault/auth/oidc/oidc/callback"
+    "https://vault.koszewscy.waw.pl/ui/vault/auth/oidc/oidc/callback"
   ],
   "groups_claim": "groups",
   "oidc_scopes": ["profile"],
@@ -108,7 +108,7 @@ Role: **User**
 1. Set the address of the Vault server. Set `VAULT_CACERT` as well when the server certificate is issued by a private CA.
 
     ```bash
-    export VAULT_ADDR=https://vault.example.com:8200
+    export VAULT_ADDR=https://vault.koszewscy.waw.pl
     export VAULT_CACERT=/path/to/server-ca.pem
     ```