Support Managed Identity (formerly known as MSI)

Some resources below:

* [MSAL does not currently support MSI](https://docs.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/known-issues#does-managed-identities-for-azure-resources-work-with-the-active-directory-authentication-library-adal-or-the-microsoft-authentication-library-msal)
  (UPDATE at 2020: It still does not support Managed Identity, even though [that FAQ was later removed](https://github.com/MicrosoftDocs/azure-docs/pull/58954/files) from that doc page.)
* [How to get a token from MSI](https://docs.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/how-to-use-vm-token#get-a-token-using-http)
* Currently IMDS is still based on AADv1, which takes `resource` parameter, and the output `expires_in` is in string (rather than integer). There is a [pending workitem to support AADv2](https://identitydivision.visualstudio.com/Engineering/_workitems/edit/696400).
* Existing [MSI client-side implementation in MSRestAsure Python](https://github.com/Azure/msrestazure-for-python/blob/v0.6.1/msrestazure/azure_active_directory.py#L463-L549) and [its example](https://github.com/Azure-Samples/resource-manager-python-manage-resources-with-msi/blob/master/example.py). And [another implementation in Azure Python SDK](https://github.com/chlowell/azure-sdk-for-python/blob/ca04208f83fed73b3306133e87f84369f3c255a9/sdk/identity/azure-identity/azure/identity/aio/_internal.py#L17-L34).

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Support Managed Identity (formerly known as MSI) #58

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Support Managed Identity (formerly known as MSI) #58

Description

Metadata

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Issue actions