Skip to content

implement-system-assigned-identity.md

Latest commit

 

History

History
39 lines (25 loc) · 2.51 KB

implement-system-assigned-identity.md

File metadata and controls

39 lines (25 loc) · 2.51 KB
ms.topic include
ms.date 11/10/2025

[!INCLUDE implement-managed-identity-concepts]

Implement the code

Add the Azure.Identity package. In an ASP.NET Core project, also install the Microsoft.Extensions.Azure package:

Command Line

In a terminal of your choice, navigate to the application project directory and run the following commands:

dotnet add package Azure.Identity
dotnet add package Microsoft.Extensions.Azure

NuGet Package Manager

Right-click your project in the Visual Studio Solution Explorer window and select Manage NuGet Packages. Search for Azure.Identity, and install the matching package. Repeat this process for the Microsoft.Extensions.Azure package.

:::image type="content" source="../media/nuget-azure-identity.png" alt-text="Install a package using the package manager.":::

Azure services are accessed using specialized client classes from the various Azure SDK client libraries. These classes and your own custom services should be registered for dependency injection so they can be used throughout your app. In Program.cs, complete the following steps to configure a client class for dependency injection and token-based authentication:

  1. Include the Azure.Identity and Microsoft.Extensions.Azure namespaces via using directives.
  2. Register the Azure service client using the corresponding Add-prefixed extension method.
  3. Use an appropriate TokenCredential instance for the environment in which your app is running. When your app is running:
    • In Azure, pass an instance of ManagedIdentityCredential to the UseCredential method. ManagedIdentityCredential discovers your managed identity configurations to authenticate to other services automatically.
    • On your local development machine, an instance of DefaultAzureCredential is created on your behalf. Call UseCredential only if you want to customize DefaultAzureCredential or use a different credential. DefaultAzureCredential looks in the environment variables for an application service principal or at locally installed developer tools, such as Visual Studio, for a set of developer credentials.

:::code language="csharp" source="../snippets/authentication/system-assigned-managed-identity/Program.cs" id="snippet_MIC_UseCredential":::