-
Notifications
You must be signed in to change notification settings - Fork 3.3k
Closed
Labels
Accountaz login/accountaz login/accountAuto-AssignAuto assign by botAuto assign by botAzure CLI TeamThe command of the issue is owned by Azure CLI teamThe command of the issue is owned by Azure CLI teamOKR CandidateThis label is used to track how many GitHub issues we have resolved for OKR purpose.This label is used to track how many GitHub issues we have resolved for OKR purpose.feature-request
Milestone
Description
Related command
az login --identity
Is your feature request related to a problem? Please describe.
Azure CLI uses below arguments for service principal authentication:
--username: client ID--password: client secret or certificate
such as
az login --service-principal --username xxx --password xxx --tenant xxx
These arguments are also used in user authentication:
az login --username xxx --password xxx --tenant xxx
Reusing --username and --password for both user and service principal authentication can be confusing.
Describe the solution you'd like
To be consistent with OAuth 2.0 client credentials flow parameters,
- Replace
--usernamewith--client-id - Replace
--passwordwith--client-secret,--certificate
When supporting OIDC authentication, --federated-token is introduced, instead of reusing --password.
Describe alternatives you've considered
Additional context
--identity may require similar changes: #29480
Metadata
Metadata
Assignees
Labels
Accountaz login/accountaz login/accountAuto-AssignAuto assign by botAuto assign by botAzure CLI TeamThe command of the issue is owned by Azure CLI teamThe command of the issue is owned by Azure CLI teamOKR CandidateThis label is used to track how many GitHub issues we have resolved for OKR purpose.This label is used to track how many GitHub issues we have resolved for OKR purpose.feature-request