|
13 | 13 | namespace Azure.Identity |
14 | 14 | { |
15 | 15 | /// <summary> |
16 | | - /// Enables authentication to Azure Active Directory using client secret, or username and password, |
17 | | - /// details configured in the following environment variables: |
| 16 | + /// Enables authentication to Azure Active Directory using a client secret or certificate, or as a user |
| 17 | + /// with a username and password. |
| 18 | + /// <para> |
| 19 | + /// Configuration is attempted in this order, using these environment variables: |
| 20 | + /// </para> |
| 21 | + /// |
| 22 | + /// <b>Service principal with secret:</b> |
18 | 23 | /// <list type="table"> |
19 | 24 | /// <listheader><term>Variable</term><description>Description</description></listheader> |
20 | | - /// <item><term>AZURE_TENANT_ID</term><description>The Azure Active Directory tenant(directory) ID.</description></item> |
21 | | - /// <item><term>AZURE_CLIENT_ID</term><description>The client(application) ID of an App Registration in the tenant.</description></item> |
| 25 | + /// <item><term>AZURE_TENANT_ID</term><description>The Azure Active Directory tenant (directory) ID.</description></item> |
| 26 | + /// <item><term>AZURE_CLIENT_ID</term><description>The client (application) ID of an App Registration in the tenant.</description></item> |
22 | 27 | /// <item><term>AZURE_CLIENT_SECRET</term><description>A client secret that was generated for the App Registration.</description></item> |
| 28 | + /// </list> |
| 29 | + /// |
| 30 | + /// <b>Service principal with certificate:</b> |
| 31 | + /// <list type="table"> |
| 32 | + /// <listheader><term>Variable</term><description>Description</description></listheader> |
| 33 | + /// <item><term>AZURE_TENANT_ID</term><description>The Azure Active Directory tenant (directory) ID.</description></item> |
| 34 | + /// <item><term>AZURE_CLIENT_ID</term><description>The client (application) ID of an App Registration in the tenant.</description></item> |
23 | 35 | /// <item><term>AZURE_CLIENT_CERTIFICATE_PATH</term><description>A path to certificate and private key pair in PEM or PFX format, which can authenticate the App Registration.</description></item> |
24 | | - /// <item><term>AZURE_CLIENT_SEND_CERTIFICATE_CHAIN</term><description>Specifies whether an authentication request will include an x5c header to support subject name / issuer based authentication. When set to `true` or `1`, authentication requests include the x5c header.</description></item> |
| 36 | + /// <item><term>AZURE_CLIENT_CERTIFICATE_PASSWORD</term><description>(Optional) The password protecting the certificate file (currently only supported for PFX (PKCS12) certificates).</description></item> |
| 37 | + /// <item><term>AZURE_CLIENT_SEND_CERTIFICATE_CHAIN</term><description>(Optional) Specifies whether an authentication request will include an x5c header to support subject name / issuer based authentication. When set to `true` or `1`, authentication requests include the x5c header.</description></item> |
| 38 | + /// </list> |
| 39 | + /// |
| 40 | + /// <b>Username and password:</b> |
| 41 | + /// <list type="table"> |
| 42 | + /// <listheader><term>Variable</term><description>Description</description></listheader> |
| 43 | + /// <item><term>AZURE_TENANT_ID</term><description>The Azure Active Directory tenant (directory) ID.</description></item> |
| 44 | + /// <item><term>AZURE_CLIENT_ID</term><description>The client (application) ID of an App Registration in the tenant.</description></item> |
25 | 45 | /// <item><term>AZURE_USERNAME</term><description>The username, also known as upn, of an Azure Active Directory user account.</description></item> |
26 | 46 | /// <item><term>AZURE_PASSWORD</term><description>The password of the Azure Active Directory user account. Note this does not support accounts with MFA enabled.</description></item> |
27 | 47 | /// </list> |
| 48 | + /// |
28 | 49 | /// This credential ultimately uses a <see cref="ClientSecretCredential"/>, <see cref="ClientCertificateCredential"/>, or <see cref="UsernamePasswordCredential"/> to |
29 | 50 | /// perform the authentication using these details. Please consult the |
30 | 51 | /// documentation of that class for more details. |
|
0 commit comments