Questions tagged [azure-managed-identity]

Azure AD managed identities for Azure resources.

For more information, see the documentation.

795 questions
3
votes
1 answer

"Login failed for user ''." SqlException when accessing Azure SQL DB via MSI with a EF code-first implementation

I am trying to get an Azure App Service application to utilize a managed service identity (MSI) and connect to an Azure SQL Database, but the .NET Framework 4.7 application fails at startup with the following…
3
votes
1 answer

Error 'unable to connect to the remote server' when accessing Azure MSI IMDS endpoint in App Service

I have enabled the Managed Service Endpoint for the App Service and I am able to see the MSI_ENDPOINT and the MSI_SECRET injected into the environment. am able to get the azure AD access token also when invoking the MSI_ENDPoint. But as per the…
SatishKuncha
  • 71
  • 1
  • 6
3
votes
1 answer

C# - Azure Storage with Managed Service Identity

Has anyone managed to implement or has any documentation regarding Managed Service Identity(MSI) with Azure Storage - Ideally using Blob My goal is to authenticate my WebApp/WebJob through MSI with Storage. After authentication has been setup I will…
TheFreeman
  • 161
  • 4
  • 13
3
votes
2 answers

Can MSI work with EF CodeFirst?

I've gotten stuck on this for quite a while now, with no luck advancing it on my own. I am trying to connect from an Azure App Service to a EF CodeFirst managed database, using an MSI token. When I deployed the App Service using ARM I produced an…
3
votes
2 answers

Error writing a file to Azure Data Lake from an Azure function using MSI

I am trying to create an Azure function that writes to Azure Data Lake Store. I am using Managed Service Identity to, well, manage the authentication stuff. I have enabled MSI on the Function app. I have also enabled the Function app to access the…
MV23
  • 285
  • 5
  • 17
3
votes
1 answer

Azure MSI: Login failed for user ''

I am trying to connect from an App Service to a database, using an MSI token, and am getting Login failed for user ''. WHen I deployed the App Service using ARM I produced an Output that ensured that it created a Service Principal: { …
user9314395
  • 407
  • 1
  • 4
  • 13
3
votes
1 answer

Use ARM to setup App Service access using MSI

There are two properties listed in the key vault documentation: objectId string Yes The object ID of a user, service principal or security group in the Azure Active Directory tenant for the vault. The object ID must be unique for the list of…
3
votes
1 answer

Azure Services Authentication Extension default tenant / subscription

I'm doing local azure function development for an MSI-enabled application using Visual Studio 2017 v15.6.2 with the Azure Services Authentication Extension installed. The identity I have to work with in the target subscription has access to multiple…
3
votes
1 answer

How to give MSI enabled Function App access to Key Vault?

I have a Function App with Managed service identity (MSI) enabled. I'm trying to use this Function App to access a secret from my Key Vault. I have added the code into my Function App to retrieve the secret. AzureServiceTokenProvider…
2
votes
1 answer

Output parameters for user-assigned-identity in bicep?

I'm trying to retrieve the Client ID of a Managed Identity created with Azure Bicep. But the documentation doesn't give any information about the output parameters. Am I missing something? How can I retrieve the client id after defining the Managed…
Enrico
  • 2,734
  • 1
  • 27
  • 40
2
votes
2 answers

Getting access_token for Azure Managed Identity in Azure DataFactory as text

Our use case is to connect Azure Datafactory (ADF) to AWS S3, but use the Managed Identity (MSI) of ADF for authentication and authorization. TL;DR version The problem we run into is that we require the access_token for the MSI in ADF, so we can…
2
votes
2 answers

Connect-ExchangeOnline -ManagedIdentity throws System.UnauthorizedAccessException

I've been trying to create a new azure function (powershell) which uses managed identity to connect to our exchange online environment. So as far as I can make out from the documentation I need to use the EXO v3, which I'm doing, and use the…
2
votes
2 answers

Database-to-Database queries using Managed Identity between Azure SQL Databases

I'm currently trying to answer a problem that can only be answered by combining the datasets of two different Azure SQL databases (different servers, if that matters). When using user+password authentication, there was a way to do cross-database…
2
votes
0 answers

ChainedTokenCredential authentication failed

``const { DefaultAzureCredential } = require('@azure/identity'); const { BlobServiceClient } = require("@azure/storage-blob"); const { v1: uuidv1 } = require("uuid"); require("dotenv").config(); async function main() { try { console.log("Azure Blob…
2
votes
2 answers

App Service managed identity connection to Azure SQL database login fails for token-identified principal

App Service dev, staging and prod deployment slots and SQL DB all have system assigned managed identities. Contributor roles have been assigned to managed identities at the subscription level. SQL Server Contained users have been created and roles…