Unable to authenticate to Azure ML Workspace using Service Principal

[gison93]

• Package Name: azureml-core
• Package Version: 1.13.0
• Operating System: Windows 10.0.18363
• Python Version: 3.6.2

Describe the bug
Unable to authenticate to Azure ML Workspace using Service Principal.
I get the following error:
AttributeError: 'AdalAuthentication' object has no attribute 'get_token'.

To Reproduce
Steps to reproduce the behavior:

1. pip install azureml-core==1.13.0

from azureml.core import Workspace
from azureml.core.authentication import ServicePrincipalAuthentication

tenant = "tenant"
client = "client"
key = "key"

credentials = ServicePrincipalAuthentication(
           tenant_id=tenant,
           service_principal_id=client,
           service_principal_password=key)

workspace = Workspace.from_config("config.json", auth=credentials)

with config.json file containing information about the Workspace.

Expected behavior
To be able of attaching to the Workspace using Service Principal.

[magrathj]

Having a similar issue connection to Azureml using service principle

[hari-buddhavarapu]

Same issue I have been facing as well. It worked fine until yesterday. Unable to connect to Azureml using service principal

[sajalda23409]

Same here. It was working fine till yesterday. From today, I am facing the same issue.

[magrathj]

Was working fine for me until around 6.30am GMT+1 this morning

[jarandaf]

Same here, started to fail today.

[avtokit2700]

Hello guys. I'm facing the same problem. Everything was fine a couple of hours ago.

[gison93]

Workaround/Possible Solution
In azure\core\pipeline\policies_authentication.py in class BearerTokenCredentialPolicy instead of calling get_token use _token_retriever() and take the element with index one.

 def on_request(self, request):
        # type: (PipelineRequest) -> None
        """Adds a bearer token Authorization header to request and sends request to next policy.

        :param request: The pipeline request object
        :type request: ~azure.core.pipeline.PipelineRequest
        """
        self._enforce_https(request)
        if self._token is None or self._need_new_token:
            scheme, self._token, _ = self._credential._token_retriever()
        self._update_headers(request.http_request.headers, self._token)

[hari-buddhavarapu]

Hi, I have been using Azure Devops Pipelines with Microsoft Hosted Agents to connect to Azure ML. I am seeing this error "AttributeError: 'AdalAuthentication' object has no attribute 'get_token'"

[jarandaf]

Can confirm @gison93 proposal seems to solve this issue. I don't fully understand what may have changed if there has been no version update, though.

[gison93]

Can confirm @gison93 proposal seems to solve this issue. I don't fully understand what may have changed if there has been no version update, though.

I suspect is due to the recent update of azure-mgmt-keyvault to version 7.0.0 some hours ago

[hari-buddhavarapu]

@gison93 can we use your proposal on microsoft hosted agents?

[chengyu-liu-cs]

Same here. It was working fine till yesterday. From today, I am facing the same issue. The codes work perfectly from my local computer but did not work from Azure hosted agents.