-
Notifications
You must be signed in to change notification settings - Fork 3.4k
Closed
Labels
Accountaz login/accountaz login/accountAzure CLI TeamThe command of the issue is owned by Azure CLI teamThe command of the issue is owned by Azure CLI teamfeature-request
Milestone
Description
Related command
az login --identity
Is your feature request related to a problem? Please describe.
Managed identity has lots of variations in different services (VM, app service, Azure Arc, hybrid runbook). Each variation requires special handling.
There are feature requests to support new types of managed identities:
- Support
az login --identityfor Azure Arc #16573 - Support Linux Hybrid Runbook Worker VM's Managed Identity #22243
But there are some technical difficulties:
- Azure CLI dropped Azure Identity and now directly uses MSAL for user/service principal authentication
- Currently, Azure CLI uses
msrestazurefor managed identity authentication, butmsrestazurehas been replaced by Azure Identity and out of maintainance - MSAL has no managed identity support, and it is not planed in the near future (Support Managed Identity (formerly known as MSI) AzureAD/microsoft-authentication-library-for-python#58)
Describe the solution you'd like
In order to support new variations of managed identity, Azure CLI needs to incorporate msrestazure's code and make changed on top of that.
Describe alternatives you've considered
MSAL to support managed identity.
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
Accountaz login/accountaz login/accountAzure CLI TeamThe command of the issue is owned by Azure CLI teamThe command of the issue is owned by Azure CLI teamfeature-request