C#•15mo ago

❔ Azure DevOps API Authentication issue (Managed Identity)

I am currently trying to add authentication to Azure managed Identity using Azure.Identity and Azure.Core in the following code:

var azureCredential = new DefaultAzureCredential();
var context = new TokenRequestContext(new string[] { $"{DevOpsURL}/.default" });
var token = await azureCredential.GetTokenAsync(context);

return token.Token;

var azureCredential = new DefaultAzureCredential();
var context = new TokenRequestContext(new string[] { $"{DevOpsURL}/.default" });
var token = await azureCredential.GetTokenAsync(context);

return token.Token;

I successfully get the token but when I try to use it in a bearer token auth header to get projects from

$"{DevOpsURL}/_apis/projects?api-version=7.0";

$"{DevOpsURL}/_apis/projects?api-version=7.0";

I get the following error

TF400813: The user 'aaaaaaaa-aaaa-aaaa-aaaa-aaaaaaaaaaaa' is not authorized to access this resource."

TF400813: The user 'aaaaaaaa-aaaa-aaaa-aaaa-aaaaaaaaaaaa' is not authorized to access this resource."

is there anything im missing as using a PAT (basic token auth header) from my own account works with the same fetch but using the managed identity one seems to not associate with an account the app is running through azure app services and it is a system managed identity Thanks

20 Replies

Unknown User•15mo ago

Message Not Public

Henkypenky•15mo ago

seems like it's not available yet

Henkypenky•15mo ago

https://learn.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/managed-identities-status

Azure Services with managed identities support - Microsoft Entra

List of services supporting managed identities

Henkypenky•15mo ago

public preview is also sometimes public gated preview, you may need to send an email and they do some tweaks behind the scenes to fix it for you

Unknown User•15mo ago

Message Not Public

Henkypenky•15mo ago

oh yeah that's probably it

Unknown User•15mo ago

Message Not Public

Henkypenky•15mo ago

paging justiphi, pagin justiphi

JustiPhi•15mo ago

Sorry had a busy afternoon

Unknown User•15mo ago

Message Not Public

JustiPhi•15mo ago

I feel like that's kinda weird because I am able to get a token, though I understand it may be a thing to contact Microsoft about, failing this what would be the best way to authenticate, the goal is to have a secure method I can use that won't cause me to have to regenerate a token every few months

Unknown User•15mo ago

Message Not Public

JustiPhi•15mo ago

So maybe if I increase the version of the devops call that could fix it?

Unknown User•15mo ago

Message Not Public

MODiX•15mo ago

tebeco#0205

https://devblogs.microsoft.com/devops/introducing-service-principal-and-managed-identity-support-on-azure-devops/

Embed Type

Article

Quoted by

<@!689473681302224947> from #Azure DevOps API Authentication issue (Managed Identity) (click here)

React with ❌ to remove this embed.

JustiPhi•15mo ago

Think I'm understanding a bit better now Will talk to the azure services admin at work tomorrow (11:40pm is probably a bit late to contact him lol)

Unknown User•15mo ago

Message Not Public

JustiPhi•15mo ago

I assume youre meaning using a PAT?

Unknown User•15mo ago

Message Not Public

Accord•15mo ago

Was this issue resolved? If so, run /close - otherwise I will mark this as stale and this post will be archived until there is new activity.

Gaming

Programming

❔ Azure DevOps API Authentication issue (Managed Identity)