diff --git a/website/content/docs/secrets/azure.mdx b/website/content/docs/secrets/azure.mdx
index f7ab3b55f774..0e3eedb05895 100644
--- a/website/content/docs/secrets/azure.mdx
+++ b/website/content/docs/secrets/azure.mdx
@@ -23,6 +23,15 @@ The password will be deleted when the lease is revoked.
 
 ## Setup
 
+<Note>
+
+  You can configure the Azure secrets engine with the Vault API or
+  established environment variables such as `AZURE_CLIENT_ID` or
+  `AZURE_CLIENT_SECRET`. If you use both methods, note that
+  environment variables always take precedence over API values.
+
+</Note>
+
 Most secrets engines must be configured in advance before they can perform their
 functions. These steps are usually completed by an operator or configuration
 management tool.