Skip to content

Commit 6996bf1

Browse files
authored
Merge pull request #212506 from SnehaSudhirG/26Sep-DisableLocalAuth
Removed the info under limitations and moved the info to Note
2 parents 88013e7 + 9e160f2 commit 6996bf1

File tree

1 file changed

+5
-5
lines changed

1 file changed

+5
-5
lines changed

articles/automation/disable-local-authentication.md

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -10,6 +10,10 @@ ms.topic: how-to
1010

1111
# Disable local authentication in Automation
1212

13+
> [!IMPORTANT]
14+
> - Update Management patching will not work when local authentication is disabled.
15+
> - When you disable local authentication, it impacts the starting a runbook using a webhook, Automation Desired State Configuration and agent-based Hybrid Runbook Workers. For more information, see the [available alternatives](#compatibility).
16+
1317
Azure Automation provides Microsoft Azure Active Directory (Azure AD) authentication support for all Automation service public endpoints. This critical security enhancement removes certificate dependencies and gives organizations control to disable local authentication methods. This feature provides you with seamless integration when centralized control and management of identities and resource credentials through Azure AD is required.
1418

1519
Azure Automation provides an optional feature to "Disable local authentication" at the Automation account level using the Azure policy [Configure Azure Automation account to disable local authentication](../automation/policy-reference.md#azure-automation). By default, this flag is set to false at the account, so you can use both local authentication and Azure AD authentication. If you choose to disable local authentication, then the Automation service only accepts Azure AD based authentication.
@@ -19,7 +23,7 @@ In the Azure portal, you may receive a warning message on the landing page for t
1923
Disabling local authentication doesn't take effect immediately. Allow a few minutes for the service to block future authentication requests.
2024

2125
>[!NOTE]
22-
> Currently, PowerShell support for the new API version (2021-06-22) or the flag – `DisableLocalAuth` is not available. However, you can use the Rest-API with this API version to update the flag.
26+
> - Currently, PowerShell support for the new API version (2021-06-22) or the flag – `DisableLocalAuth` is not available. However, you can use the Rest-API with this API version to update the flag.
2327
2428
## Re-enable local authentication
2529

@@ -35,10 +39,6 @@ The following table describes the behaviors or features that are prevented from
3539
|Using Automation Desired State Configuration.| Use [Azure Policy Guest configuration](../governance/machine-configuration/overview.md).  |
3640
|Using agent-based Hybrid Runbook Workers.| Use [extension-based Hybrid Runbook Workers (Preview)](./extension-based-hybrid-runbook-worker-install.md).|
3741

38-
## Limitations
39-
40-
Update Management patching will not work when local authentication is disabled.
41-
4242

4343
## Next steps
4444
- [Azure Automation account authentication overview](./automation-security-overview.md)

0 commit comments

Comments
 (0)