Right now I'm converting our apps from connecting to Azure App Configs and Azure Key Vaults using Client IDs + Secrets to using the DefaultAzureCredentials. Overall, I like the additional security that I'm gaining. And that I can govern access via a combination of Azure AD Groups (Developers) and Managed Identities (Deployed Apps).
One big issue I'm running into is using the Interactive Browser Credential adds about 10 seconds to the startup time of the app. Plus developers have to manually click on their account in the browser before the app even continues launching. Is there a way to have the DefaultAzureCredentials use the Visual Studio account instead of having to go to the browser? Or is there any other way to improve startup speed?
This doesn't work with your Visual Studio Account
. You need to log in with your Azure Ad Account
.
You can do this with the Azure Service Authentication
from Visual Studio or with the Azure Cli az login
.
AzureDefaultCredentials
try different authentication methods in a specific order which you can find here.