Skip to content

Commit f1547f7

Browse files
(AzureCXP) Fix for GitHub Issue 52087
Updated the documentation to add managed identity credential rotation information. https://github.com/MicrosoftDocs/azure-docs/issues/52087 ------- cc: @MARKUSVI
1 parent ece02cb commit f1547f7

File tree

1 file changed

+5
-1
lines changed
  • articles/active-directory/managed-identities-azure-resources

1 file changed

+5
-1
lines changed

articles/active-directory/managed-identities-azure-resources/overview.md

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -48,8 +48,12 @@ There are two types of managed identities:
4848
- A **user-assigned managed identity** is created as a standalone Azure resource. Through a create process, Azure creates an identity in the Azure AD tenant that's trusted by the subscription in use. After the identity is created, the identity can be assigned to one or more Azure service instances. The lifecycle of a user-assigned identity is managed separately from the lifecycle of the Azure service instances to which it's assigned.
4949

5050
Internally, managed identities are service principals of a special type, which are locked to only be used with Azure resources. When the managed identity is deleted, the corresponding service principal is automatically removed.
51+
Also, when a User-Assigned or System-Assigned Identity is created, the Managed Identity Resource Provider (MSRP) issues a certificate internally to that identity.
5152

52-
Your code can use a managed identity to request access tokens for services that support Azure AD authentication. Azure takes care of rolling the credentials that are used by the service instance.
53+
Your code can use a managed identity to request access tokens for services that support Azure AD authentication. Azure takes care of rolling the credentials that are used by the service instance.
54+
55+
## Credential Rotation
56+
Credential rotation is controlled by the resource provider that hosts the Azure resource. The default rotation of the credential occurs every 46 days. It's up to the resource provider to call for new credentials, so the resource provider could wait longer than 46 days.
5357

5458
The following diagram shows how managed service identities work with Azure virtual machines (VMs):
5559

0 commit comments

Comments
 (0)