azure-identity-py

Topics in the source

• Azure Identity library for Python
• Installation
• Python Version
• Environment Variables
• Authentication & Lifecycle
• DefaultAzureCredential
• Credential Chain Order
• Customizing DefaultAzureCredential

Authentication library for Azure SDK clients using Microsoft Entra ID. Use this skill when: An app needs to authenticate to Azure services from Python You need DefaultAzureCredential for local dev + Azure deployment You need ManagedIdentityCredential for Azure-hosted workloads You need service principal auth with secret or certificate You need direct token acquisition with gettoken() You need to troubleshoot credential chain failures For VS Code or broker-based desktop auth: azure-identity supports Python 3.9+. 🔑 Two rules apply to every code sample below: 1. Prefer DefaultAzureCredential. It works locally (Azure CLI / VS Code / Developer CLI) and in Azure (managed identity, workload identity) with no code change. Avoid connection strings, account/API keys — they bypass Entra audit and rotation. - Local dev: DefaultAzureCredential works as-is. - Production: set AZURETOKENCREDENTIALS=prod (or AZURETOKENCREDENTIALS= ) to constrain the credential chain to production-safe credentials. 2. Wrap credentials and clients in context managers when they own token caches / transports: - Sync: with DefaultAzureCredential() as credential: - Async: async with DefaultAzureCredential() as credentia

This is an excerpt. Refer to the complete source and its current requirements.