az ad app credential list --id xxxxx - not listing 'certificate' type details

[paulpuvi06]

az feedback auto-generates most of the information requested below, as of CLI version 2.0.62

Describe the bug
I am trying to get credentials list of my APP using **az ad app credential list --id ** , but it returns only client secret list.

To Reproduce
Create AD SP
Upload certificate to SPN and execute

az ad app credential list --id <applicaitonid>

az ad sp credential list --id <applicaitonid>

Expected behavior

it should return all type of credentials belongs to specific applicationid. i am able to get the types (AsymmetricX509Cert,Password) using below commands in pwsh, but really want to use az cli for --show-mine filter :)

Get-AzADApplication -ObjectId "xxxxxx" | Get-AzADAppCredential

Environment summary

azure-cli - 2.0.70 * | mac os 10.14.5 (18F132)

[jiasli]

azure-cli/src/azure-cli/azure/cli/command_modules/role/custom.py

Line 1143 in c935aa4

def list_service_principal_credentials(cmd, identifier, cert=False):

cert is False by default, so list_password_credentials is called. To get certificates listed, append --cert, so that CLI calls list_key_credentials.

az ad app credential list --id xxxx --cert

Also see: https://docs.microsoft.com/en-us/cli/azure/ad/app/credential?view=azure-cli-latest

[paulpuvi06]

yes ! it works . it would be great if "az ad app credential list --id xxxx " returns both type of credentials which is easier to prepare reports rather than writing loops in script. can this be considered as feature request ?

[jiasli]

Sure. We will discuss with our PM.

[chrishayescodes]

yes ! it works . it would be great if "az ad app credential list --id xxxx " returns both type of credentials which is easier to prepare reports rather than writing loops in script. can this be considered as feature request ?

what would be greater would be adding this information to the documentation.
current verbiage:
--cert
A certificate based credential.

suggested verbiage:
--cert
Show certificate based credentials only. (absence of flag will show password credentials only)

[RakeshMohanMSFT]

This is updated