Requirements
- Target platform
- OpenClaw
- Install method
- Manual import
- Extraction
- Extract archive
- Prerequisites
- OpenClaw
- Primary doc
- SKILL.md
Azure Identity SDK for Python authentication. Use for DefaultAzureCredential, managed identity, service principals, and token caching. Triggers: "azure-identity", "DefaultAzureCredential", "authentication", "managed identity", "service principal", "credential".
Azure Identity SDK for Python authentication. Use for DefaultAzureCredential, managed identity, service principals, and token caching. Triggers: "azure-identity", "DefaultAzureCredential", "authentication", "managed identity", "service principal", "credential".
Hand the extracted package to your coding agent with a concrete install brief instead of figuring it out manually.
I downloaded a skill package from Yavira. Read SKILL.md from the extracted folder and install it by following the included instructions. Tell me what you changed and call out any manual steps you could not complete.
I downloaded an updated skill package from Yavira. Read SKILL.md from the extracted folder, compare it with my current installation, and upgrade it while preserving any custom configuration unless the package docs explicitly say otherwise. Summarize what changed and any follow-up checks I should run.
Authentication library for Azure SDK clients using Microsoft Entra ID (formerly Azure AD).
pip install azure-identity
# Service Principal (for production/CI) AZURE_TENANT_ID=<your-tenant-id> AZURE_CLIENT_ID=<your-client-id> AZURE_CLIENT_SECRET=<your-client-secret> # User-assigned Managed Identity (optional) AZURE_CLIENT_ID=<managed-identity-client-id>
The recommended credential for most scenarios. Tries multiple authentication methods in order: from azure.identity import DefaultAzureCredential from azure.storage.blob import BlobServiceClient # Works in local dev AND production without code changes credential = DefaultAzureCredential() client = BlobServiceClient( account_url="https://<account>.blob.core.windows.net", credential=credential )
OrderCredentialEnvironment1EnvironmentCredentialCI/CD, containers2WorkloadIdentityCredentialKubernetes3ManagedIdentityCredentialAzure VMs, App Service, Functions4SharedTokenCacheCredentialWindows only5VisualStudioCodeCredentialVS Code with Azure extension6AzureCliCredentialaz login7AzurePowerShellCredentialConnect-AzAccount8AzureDeveloperCliCredentialazd auth login
# Exclude credentials you don't need credential = DefaultAzureCredential( exclude_environment_credential=True, exclude_shared_token_cache_credential=True, managed_identity_client_id="<user-assigned-mi-client-id>" # For user-assigned MI ) # Enable interactive browser (disabled by default) credential = DefaultAzureCredential( exclude_interactive_browser_credential=False )
For Azure-hosted resources (VMs, App Service, Functions, AKS): from azure.identity import ManagedIdentityCredential # System-assigned managed identity credential = ManagedIdentityCredential() # User-assigned managed identity credential = ManagedIdentityCredential( client_id="<user-assigned-mi-client-id>" )
For service principal with secret: from azure.identity import ClientSecretCredential credential = ClientSecretCredential( tenant_id=os.environ["AZURE_TENANT_ID"], client_id=os.environ["AZURE_CLIENT_ID"], client_secret=os.environ["AZURE_CLIENT_SECRET"] )
Uses the account from az login: from azure.identity import AzureCliCredential credential = AzureCliCredential()
Custom credential chain: from azure.identity import ( ChainedTokenCredential, ManagedIdentityCredential, AzureCliCredential ) # Try managed identity first, fall back to CLI credential = ChainedTokenCredential( ManagedIdentityCredential(client_id="<user-assigned-mi-client-id>"), AzureCliCredential() )
CredentialUse CaseAuth MethodDefaultAzureCredentialMost scenariosAuto-detectManagedIdentityCredentialAzure-hosted appsManaged IdentityClientSecretCredentialService principalClient secretClientCertificateCredentialService principalCertificateAzureCliCredentialLocal developmentAzure CLIAzureDeveloperCliCredentialLocal developmentAzure Developer CLIInteractiveBrowserCredentialUser sign-inBrowser OAuthDeviceCodeCredentialHeadless/SSHDevice code flow
from azure.identity import DefaultAzureCredential credential = DefaultAzureCredential() # Get token for a specific scope token = credential.get_token("https://management.azure.com/.default") print(f"Token expires: {token.expires_on}") # For Azure Database for PostgreSQL token = credential.get_token("https://ossrdbms-aad.database.windows.net/.default")
from azure.identity.aio import DefaultAzureCredential from azure.storage.blob.aio import BlobServiceClient async def main(): credential = DefaultAzureCredential() async with BlobServiceClient( account_url="https://<account>.blob.core.windows.net", credential=credential ) as client: # ... async operations pass await credential.close()
Use DefaultAzureCredential for code that runs locally and in Azure Never hardcode credentials β use environment variables or managed identity Prefer managed identity in production Azure deployments Use ChainedTokenCredential when you need a custom credential order Close async credentials explicitly or use context managers Set AZURE_CLIENT_ID for user-assigned managed identities Exclude unused credentials to speed up authentication
Agent frameworks, memory systems, reasoning layers, and model-native orchestration.
Largest current source with strong distribution and engagement signals.