Skip to content

Commit bcab4c6

Browse files
authored
Document managed identity object ID support in Microsoft.Extensions.Azure (#43348)
1 parent 1ab66cb commit bcab4c6

File tree

1 file changed

+30
-16
lines changed

1 file changed

+30
-16
lines changed

docs/azure/sdk/authentication/create-token-credentials-from-configuration.md

Lines changed: 30 additions & 16 deletions
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,7 @@ title: Create token credentials from configuration
33
description: This article describes how to create Microsoft Entra token credentials from configuration files.
44
ms.topic: how-to
55
ms.custom: devx-track-dotnet, engagement-fy23
6-
ms.date: 1/16/2024
6+
ms.date: 11/05/2024
77
---
88

99
# Create Microsoft Entra credential types using configuration files
@@ -68,25 +68,39 @@ You can create both user-assigned and system-assigned managed identities using c
6868

6969
#### User-assigned managed identities
7070

71-
Specify a user-assigned managed identity via a client ID:
71+
A user-assigned managed identity can be used by providing a client ID, resource ID, or object ID:
7272

73-
```json
74-
{
75-
"credential": "managedidentity",
76-
"clientId": "<clientId>"
77-
}
78-
```
73+
- **Client ID:**
7974

80-
Alternatively, specify a user-assigned managed identity via a resource ID:
75+
```json
76+
{
77+
"credential": "managedidentity",
78+
"clientId": "<clientId>"
79+
}
80+
```
8181

82-
```json
83-
{
84-
"credential": "managedidentity",
85-
"managedIdentityResourceId": "<managedIdentityResourceId>"
86-
}
87-
```
82+
- **Resource ID:**
83+
84+
```json
85+
{
86+
"credential": "managedidentity",
87+
"managedIdentityResourceId": "<managedIdentityResourceId>"
88+
}
89+
```
90+
91+
The resource ID takes the form `/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}`.
92+
93+
- **Object ID:**
94+
95+
```json
96+
{
97+
"credential": "managedidentity",
98+
"managedIdentityObjectId": "<managedIdentityObjectId>"
99+
}
100+
```
88101

89-
The resource ID takes the form `/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}`.
102+
> [!IMPORTANT]
103+
> The `managedIdentityObjectId` JSON property is supported in `Microsoft.Extensions.Azure` versions 1.8.0 and later.
90104

91105
#### System-assigned managed identities
92106

0 commit comments

Comments
 (0)