I am having trouble calling the Azure Instance Metadata Service (IMDS) from an App Service to get a token. We have an App Service that was created >18 months ago. Recently we enabled Managed Identity for it. On the azure portal page there is a…
Is it possible to connect to Azure cosmos DB using MSI the same way as it is possible for Azure SQL?
That's how it works for Azure SQL Server
using (var connection = new SqlConnection(connectionString))
{
connection.AccessToken = await new…
I am trying to figure out what we could do in v1 by setting the MSI_ENDPOINT and MSI_SECRET via run.ps1 script. Function will access a number of other services using the service assigned identity. Is there a way to set this up so my local dev…
I have a VM with a system-assigned managed service identitiy. I gave it permission to pull images from the Azure container registry. I followed this tutorial.
I worked fine yesterday. But when wanting to pull a new image, it said to re-authenticate.…
I'm trying to find information on how to set up the connection strings in a Function App binding so that the app uses managed identities to access Event Hubs and other resources. I'm able to use managed identities in other applications by getting an…
Are there errors that Managed Service Identity (MSI) authentication that are transient and worthwhile retrying?
Reading through the implementation I can see HttpRequestException and Exception are absorbed by the framework and rethrown as…
I have a couple APIs and I'm in the process of changing the way I access my Azure SQL Databases from a simple credential to a Managed Service Identity model leveraging our Azure Active Directory.
I've had no problem doing this for my older .Net API…
I'm running one Microsoft doc tutorial on how to set up MSI access to Azure SQL. This article:
https://learn.microsoft.com/en-gb/azure/app-service/app-service-web-tutorial-connect-msi
I succesfully get the connection string from my Azure web config…
I am trying to use Azure Managed Service Identity with Azure functions and KeyVault. I want to be able to get secrets from the vault and also use ADAL to authenticate with a certificate to get access to SharePoint Online. I'm developing locally with…
Recently created a function app running. The function app hosts a C# and PowerShell function which works as expected with MSI enabled
PowerShell code below, full code in Github
Write-Output "PowerShell Timer trigger function executed…
I'm trying to retrofit MSI to an existing app.
The original app's DbContext used only a Constructor that found a ConnectionString by the same name in the web.config.
I've modified it to use a DbConnectionFactory to inject an AccessToken.
public…
I'm trying to build a Bot using MS Bot framework and this bot is hosted as an Azure Web App. I've added code to create resource groups using the Microsoft.Azure.Management.Fluent APIs
AzureCredentialsFactory f = new AzureCredentialsFactory();
var…
I have been testing out the recently released Managed Service Identity (MSI) for Azure and have successfully created an MSI for our App Services using the ARM template approach described in the documentation here: How to use Azure Managed Service…
I'm programmatically creating EventGrid Domain's and Topics using the Azure.ResourceManager libraries. I'd like to assign a user assigned identity to the domain as well. I can see that the EventGridDomainData object has an Identity property and that…
I am attempting to use bicep to replicate the following scenario:
An Azure SQL instance with a single database
An Azure function which needs to connect to that database via managed identity.
As it stands, once the infrastructure is deployed we…