Skip to content

Conversation

@daxian-dbw
Copy link
Member

PR Summary

The InteractiveBrowserCredential is excluded by default because it requires user's interaction.
Update DefaultAzureCredential to allow InteractiveBrowserCredential.

PR Context

We got report that when using Entra id login, it doesn't fall back to the InteractiveBrowserCredential.

ERROR: Agent failed to generate a response: DefaultAzureCredential failed to retrieve a token from the included credentials. See the troubleshooting guide for more information.
https://aka.ms/azsdk/net/identity/defaultazurecredential/troubleshoot
- EnvironmentCredential authentication unavailable. Environment variables are not fully configured. See the troubleshooting guide for more information.
https://aka.ms/azsdk/net/identity/environmentcredential/troubleshoot
- WorkloadIdentityCredential authentication unavailable. The workload options are not fully configured. See the troubleshooting guide for more information.
https://aka.ms/azsdk/net/identity/workloadidentitycredential/troubleshoot
- ManagedIdentityCredential authentication unavailable. No response received from the managed identity endpoint.
- VisualStudioCredential authentication failed: Visual Studio Token provider can't be accessed at C:\Users\MSFTStudent\AppData\Local\.IdentityService\AzureServiceAuth\tokenprovider.json
- AzureCliCredential authentication failed: Azure CLI not installed
- AzurePowerShellCredential authentication failed: Az.Accounts module >= 2.2.0 is not installed.
- AzureDeveloperCliCredential authentication failed: Azure Developer CLI could not be found.
   at Azure.Identity.DefaultAzureCredential.GetTokenFromSourcesAsync(TokenCredential[] sources, TokenRequestContext requestContext, Boolean async, CancellationToken cancellationToken)
...

@daxian-dbw daxian-dbw merged commit b591ed9 into PowerShell:main May 20, 2025
4 checks passed
@daxian-dbw daxian-dbw deleted the interactive branch May 20, 2025 20:31
daxian-dbw added a commit that referenced this pull request Jun 13, 2025
This release is a security patch only, including the following changes:

- Upgrade to .NET SDK 8.0.411 to address the .NET security issue [CVE-2025-30399](dotnet/announcements#362): .NET Remote Code Vulnerability
- OpenAI agent: update `DefaultAzureCredential` to allow `InteractiveBrowserCredential` (#383)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants