Azure connection with managed identity instead of connection string

[fp-hybrid-stani]

Hey guys,

I would like to use Azure managed identity to connect to Azrue Service Bus, instead of connection string. Is it possible?

Regards Stani

[zarusz]

Hey @fp-hybrid-stani,

Yes, this should be possible using the ClientFactory and AdminClientFactory options. Here's an example of how you can configure it:

builder.WithProviderServiceBus(cfg =>
{
    // Do not set the connection string
    // cfg.ConnectionString = serviceBusConnectionString;
    
    cfg.ClientFactory = (svp, _) => new ServiceBusClient(
        "<namespace>.servicebus.windows.net",
        new DefaultAzureCredential() // or use ManagedIdentityCredential()
    );

    cfg.AdminClientFactory = (svp, _) => new ServiceBusAdministrationClient(
        "<namespace>.servicebus.windows.net",
        new DefaultAzureCredential() // or use ManagedIdentityCredential()
    );
});

I haven't used MI yet, but this should do the trick. Let me know if it worked or not.

If it did work, I can extend the Bus APIs so that its easier to configure the ASB transport when Managed Identity is used.

---

Also, there is an Aspire sample in #343

[fp-hybrid-stani]

Hey @zarusz,

first of all thanks a lot for your answer. I am getting an error "The ConnectionString is not set", when I'm, not setting the connstring or setting it to string.Empty.

[zarusz]

I see there is a validation happening for the ConnectionString. As a workaround you could try to set some fake string in there. If the factory approach shared above works, I will issue a small feature to support the MI within the ASB bus configuration.

[fp-hybrid-stani]

Thanks, to fake a connstring worked out.

[zarusz]

Great, once I propose the new MI configuration API then will tag you on a feature to weigh in. Thanks.