Facing issue connecting azure using service principle over Azure CLI while works with Powershell

[AnilJujjuri007]

Describe the bug

Facing issuing using it over Azure CLI
az login --service-principal -u <APP_ID> -p <CLIENT_SECRET> --tenant <TENANT_ID>

Works with Powershell

$credentials = Get-Credential
Connect-AzAccount -ServicePrincipal -Credential $credentials -Tenant

Related command

az login --service-principal -u <APP_ID> -p <CLIENT_SECRET> --tenant <TENANT_ID> by using the facing issue that app is not under subscription even everything in the right manner.

Errors

No subscription found for mentioned app

Issue script & Debug output

az account clear
az identity list

Expected behavior

should be worked but not

Environment Summary

azure-cli 2.76.0

core 2.76.0
telemetry 1.1.0

Dependencies:
msal 1.33.0b1
azure-mgmt-resource 23.3.0

Python location '/opt/az/bin/python3'
Config directory '/home/edgedevice/.azure'
Extensions directory '/home/edgedevice/.azure/cliextensions'

Python (Linux) 3.12.10 (main, Jul 29 2025, 09:26:29) [GCC 11.4.0]

Legal docs and information: aka.ms/AzureCliLegal

Your CLI is up-to-date.

Additional context

No response

[yonzhan]

Thank you for opening this issue, we will look into it.

[github-actions]

Here are some similar issues that might help you. Please check if they can solve your problem.

• Can't az login with service principal certificate #14773

---

Possible solution (Extracted from existing issue, might be incorrect; please verify carefully)

Solution 1:

These messages are triggered by telemetry module which tries to get the current user and subscription:

  File "/opt/az/lib/python3.6/site-packages/azure/cli/core/telemetry.py", line 426, in _get_user_azure_id
    return _get_profile().get_current_account_user()

  File "/opt/az/lib/python3.6/site-packages/azure/cli/core/telemetry.py", line 436, in _get_azure_subscription_id
    return _get_profile().get_subscription_id()

I believe this message only appears in the --debug log which has been suppressed by

azure-cli/src/azure-cli-core/azure/cli/core/decorators.py

Lines 68 to 81 in 0421019

	def suppress_all_exceptions(fallback_return=None, **kwargs): # pylint: disable=unused-argument
	# The kwargs is a fallback to ensure extensions (eg. alias) are not broken
	def _decorator(func):
	@wraps(func)
	def _wrapped_func(*args, **kwargs):
	try:
	return func(*args, **kwargs)
	except Exception: # nopa pylint: disable=broad-except
	import traceback
	get_logger(__name__).info('Suppress exception:\n%s', traceback.format_exc())
	if fallback_return is not None:
	return fallback_return
	return _wrapped_func
	return _decorator

So it won't affect the user experience. It this log causing any side-effect to your script?

Reference:

• Can't az login with service principal certificate #14773 (comment)

Solution 2:

The current effect is that if there are no subscriptions, the az CLI issues an exit code 1.

Reference:

• Can't az login with service principal certificate #14773 (comment)

Solution 3:

Thank you, this solves my problem!

Reference:

• Can't az login with service principal certificate #14773 (comment)

Powered by issue-sentinel