Condensed from azure-identity-ts. Full patterns (sovereign clouds, device code flow, custom credentials, bearer token provider) in the azure-identity-ts plugin skill if installed.
npm install @azure/identity
Auth:
DefaultAzureCredentialis for local development. See auth-best-practices.md for production patterns.
import { DefaultAzureCredential } from "@azure/identity";
const credential = new DefaultAzureCredential();- Use DefaultAzureCredential for local development only (CLI, PowerShell, VS Code). In production, use ManagedIdentityCredential — see auth-best-practices.md
- Never hardcode credentials — use environment variables or managed identity
- Prefer managed identity — no secrets to manage in production
- Scope credentials appropriately — use user-assigned identity for multi-tenant scenarios
- Handle token refresh — Azure SDK handles this automatically
- Use ChainedTokenCredential for custom fallback scenarios