diff --git a/src/azure-cli/HISTORY.rst b/src/azure-cli/HISTORY.rst
index 4b3d179179a..747481bece0 100644
--- a/src/azure-cli/HISTORY.rst
+++ b/src/azure-cli/HISTORY.rst
@@ -86,6 +86,10 @@ Release History
 * Private link and endpoint support for provider `Microsoft.Authorization/resourceManagementPrivateLinks` (#19742)
 * Private link and endpoint support for provider `Microsoft.MachineLearningServices/workspaces` (#19729)
 
+**Profile**
+
+* `az account show`: Deprecate `--sdk-auth`
+
 **RDBMS**
 
 * [BREAKING CHANGE] `az postgres flexible-server migration`: Change `--properties @{filepath}` to `--properties {filepath}` (#19516)
@@ -94,6 +98,10 @@ Release History
 * `az postgres flexible-server migration update`:  Add `--start-data-migration` to reschedule the migration to start right now. (#19516)
 * Update list-skus, create command location setting and replica command (#19531)
 
+**Role**
+
+* `az ad sp create-for-rbac`: Deprecate `--sdk-auth`
+
 **Security**
 
 * Add command `az security setting update` (#19561)
diff --git a/src/azure-cli/azure/cli/command_modules/profile/__init__.py b/src/azure-cli/azure/cli/command_modules/profile/__init__.py
index 0f6bcfacd65..b408737bde2 100644
--- a/src/azure-cli/azure/cli/command_modules/profile/__init__.py
+++ b/src/azure-cli/azure/cli/command_modules/profile/__init__.py
@@ -73,7 +73,9 @@ def load_arguments(self, command):
             c.ignore('_subscription')  # hide the global subscription parameter
 
         with self.argument_context('account show') as c:
-            c.argument('show_auth_for_sdk', options_list=['--sdk-auth'], action='store_true', help='Output result to a file compatible with Azure SDK auth. Only applicable when authenticating with a Service Principal.')
+            c.argument('show_auth_for_sdk', options_list=['--sdk-auth'], action='store_true',
+                       deprecate_info=c.deprecate(target='--sdk-auth', expiration='3.0.0'),
+                       help='Output result to a file compatible with Azure SDK auth. Only applicable when authenticating with a Service Principal.')
 
         with self.argument_context('account get-access-token') as c:
             c.argument('resource_type', get_enum_type(cloud_resource_types), options_list=['--resource-type'], arg_group='', help='Type of well-known resource.')
diff --git a/src/azure-cli/azure/cli/command_modules/role/_params.py b/src/azure-cli/azure/cli/command_modules/role/_params.py
index 49da3afa722..80daa42a94f 100644
--- a/src/azure-cli/azure/cli/command_modules/role/_params.py
+++ b/src/azure-cli/azure/cli/command_modules/role/_params.py
@@ -90,7 +90,9 @@ def load_arguments(self, _):
                    help='Skip creating the default assignment, which allows the service principal to access resources under the current subscription. '
                         'When specified, --scopes will be ignored. You may use `az role assignment create` to create '
                         'role assignments for this service principal later.')
-        c.argument('show_auth_for_sdk', options_list='--sdk-auth', help='output result in compatible with Azure SDK auth file', arg_type=get_three_state_flag())
+        c.argument('show_auth_for_sdk', options_list='--sdk-auth',
+                   deprecate_info=c.deprecate(target='--sdk-auth', expiration='3.0.0'),
+                   help='output result in compatible with Azure SDK auth file', arg_type=get_three_state_flag())
 
     with self.argument_context('ad sp owner list') as c:
         c.argument('identifier', options_list=['--id'], help='service principal name, or object id or the service principal')