Azure Managed Identity and Local Development

The Managed Identities for Azure resources feature in Azure Active Directory, provides Azure services with an automatically managed identity in Azure AD. You can use the identity to authenticate to any service that supports Azure AD authentication

In this video, let us look at how you can set up your local development environment to work with MSI using the DefaultAzureCredential part of the Azure SDK libraries.

We will look into the two options available
- Using Environment Variables
- Using SharedTokenCacheCredential

Note: Microsoft has renamed Managed Service Identity" to Managed Identity. (Thanks Wonkyu Lee for pointing it out in the comments)

[moriazizi]

Hi Rahul,
Great video specially it has been posted 3 years ago.
I have a question, you have explained it for GraphAPI, what I like to know is, lets say we have multiple APIs and they need to communicate to each other, I get it working with Managed Identity when it is hosted in the Azure, but I have problem in Visual Studio and I still need to use app registration, I cant find a proper way to add my AD user or AD group that I am part of it for API level and give the required access, in Microsoft document there are limited example for KeyVault, Servive bus and blob storage, if my questio nis clear for you, could you help me please ?

[jessebryan]

If secret manager doesn't check anything into source control, would every developer have to set it up?

[manulscode]

What would be the scope for accessing CosmosDb instead of graph? Can't find any examples anywhere. Thank you.

[animeshsharma]

Hi Rahul, Nice video but I tried to understand that how app registration values (client secret, appid, tenant id) are used in .net code for getting access taken. Could you please explain it in bit detail.

[gourav]

Is it safe to store client Id and secret in project solution under managed user secrets?

[yashdeepthorat]

Hi Rahul, great tutorial!, is there a way to setup it up for local development in a local service fabric cluster? Or is using environment variables the only option?

[ganirban]

Hi Rahul,
Nice course.
Also can u pls share source code repo at github or azure-devops ?

Many Thanks,

[vijayalaxmik]

Hi Rahul,
Do you know how to use on-behalf -of flow for client app ( using client credential ) . I have a requirement where a client application calls middle tier application and that middle tier application will call graph api .
I am able to get a token for user using on-behalf-of flow, but not for an application.
Is this even possible ?
Thanks for all your help .

[wonkyuqlee]

MS changed the name "Managed Service Identity" to "Managed Identity"