Thank you for sharing @pschaeflein 👏🏻

I've been looking into using Managed Identities in Azure Functions recently as well, the implementation is actually very simple to obtain a token, the below example would be used for obtaining a token using a System-Assigned Identity, for a User-assigned Identity we would pass the Client Id as an additional query-string parameter.

const getToken = async (resource: string): Promise<IToken> => {
    return new Promise(async (resolve, reject) => {
        const url: string = `${process.env["MSI_ENDPOINT"]}/?resource=${resource}&api-version=2017-09-01`;
        const options: request.RequestPromiseOptions = {
            headers: {
                "Accept": "application/json",
                "Secret": process.env["MSI_SECRET"]
            }
        }
        return request.get(url, options);
    });
}

It is the responsibility of the user to
a) configure managed identity for the host and
b) ensure the Managed Identity AuthType is specified only when executing on a host that supports Managed Identity.

Absolutely agree on this, but we should also help guide our users by providing some documentation, something in a similar format to how we produced the documentation for the GitHub Actions. We can include an explanation to help users understand the benefits of Managed Identity and simple tutorial e.g. "Hello World" that guides the user through the process of configuration and usage to aid adoption.

Allow authentication using managed identity #1314

Description

Metadata

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Issue actions