Support for authentication using federated credentials

[troyready]

Community Note

• Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritize this request
• Please do not leave "+1" or "me too" comments, they generate extra noise for issue followers and do not help prioritize the request
• If you are interested in working on this issue or have submitted a pull request, please leave a comment

Description

It would be ideal to be able to use Azure federated identity credentials with Terraform (specifically with GitHub Actions).

I'm not certain what the best path forward is, but some thoughts:

• Looking into the authentication a tiny bit, would it make the most sense to support the oath token as a distinct provider authentication source?
• I'm not sure if the issue(s) described in #3814 still apply -- if not, one path forward would be to support az logins for a service principal without a secret/cert.

References

• I've also opened an issue on the azure/login GitHub action to inquire about it exporting the principal secret as an alternative to this issue's request.

[tombuildsstuff]

hi @troyready

Thanks for opening this issue.

Whilst we've got no plans to support Service Principal auth using the CLI (as you've called out #3814) - support for OIDC is being tracked in this upstream issue: hashicorp/go-azure-helpers#91

As such rather than having multiple issues open tracking the same thing, I'm going to close this in favour of the upstream issue would you mind subscribing to that issue for updates?

Thanks!

[github-actions]

I'm going to lock this issue because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues.
If you have found a problem that seems similar to this, please open a new issue and complete the issue template so we can capture all the details necessary to investigate further.