Make `az login` emit Entra ID login correlation information

[maskati]

Related command
az login

Is your feature request related to a problem? Please describe.
It would be useful to be able to correlate Azure CLI login operations against Entra ID sign-in log unique identifiers for example when performing login through the Azure login GitHub Action.

Describe the solution you'd like
Emit MSAL correlation ID as part of the login operation.

Describe alternatives you've considered
Resolve the unique token identifier (uti) for the login token (az account get-access-token) as a unique identifier mappable to Entra ID sign-in logs. However this might be different from the sign-in operation.

[yonzhan]

Thank you for opening this issue, we will look into it.

[jiasli]

The --debug log contains the correlation ID.

With WAM:

> az login --debug
...
msal.broker: [MSAL:0002]        INFO    SetCorrelationId:258    Set correlation ID: 8e1ea281-7dfd-447c-b873-9bd23b6f7924

With browser-based flow:

> az config set core.enable_broker_on_windows=false
> az login --debug
...
msal.telemetry: Generate or reuse correlation_id: e108fd90-1443-4437-91c3-f494e058a603

Is there a scenario that you are not seeing the correlation ID?

[maskati]

Thanks for the feedback. Enabling --debug does emit the correlation ID. It is a bit verbose to have debug enabled in order to provide audit and traceability. This is however sufficient for investigating issues during authentication.