[QUERY] DefaultAzureCredential not working on an Azure Arc enabled Windows Server

[courtzzz]

Library name and version

Azure.Identity 1.13.1

Query/Question

Hi there

I have an arc enabled WIndows Server 2022.

Im using DefaultAzureCredential and trying to use the Azure assigned managed identity to Authenticate to Azure key vault (and also azure storage at some stage)

I've populated the environment variable AZURE_CLIENT_ID + AZURE_TENANT_ID with the Id of this managed identity and you can see the other related environment variables

But on starting the windows service I just get:

AuthenticationFailedException. User assigned managed identity is not supported by the detected managed indentity environment

SO confused - I thought this was supported in Arc enabled servers? If this is not the way to do it in the Porgram startup, then how is it done? Im trying to not use the AZURE_CLIENT_SECRET

Environment

No response

[github-actions]

Thank you for your feedback. Tagging and routing to the team member best able to assist.

[christothes]

Does it work if you remove the defined AZURE_CLIENT_ID + AZURE_TENANT_ID environment variables? Setting an AZURE_CLIENT_ID will cause DefaultAzureCredential to treat this like a user-assigned managed identity, by default. Not specifying anything will default in a system assigned identity.

[github-actions]

Hi @courtzzz. Thank you for opening this issue and giving us the opportunity to assist. To help our team better understand your issue and the details of your scenario please provide a response to the question asked above or the information requested above. This will help us more accurately address your issue.

[courtzzz]

Yes removing all the environment variables works.

I don't that was super clear from all the documents I read. Hopefully this ticket helps someone else.