az login fails with Azure AD service principal and certain client secrets.

[krishjag]

When attempting to login using az cli using Azure AD service princiapal, certain client secrets are causing errors.

Here's an example of a client secret that failed and the error message.

az login --service-principal --username <service_principal_application_id> --password "-6fkdUrc:x-]M63JPPosVWJS47cWiiUX" --tenant <azure_ad_tenant_id>

ERROR: az login: error: argument --password/-p: expected one argument
usage: az login [-h] [--verbose] [--debug]
[--output {json,jsonc,table,tsv,yaml,none}] [--query JMESPATH]
[--username USERNAME] [--password PASSWORD]
[--service-principal] [--tenant TENANT]
[--allow-no-subscriptions] [-i] [--use-device-code]
[--use-cert-sn-issuer]

Seems like an issue with the format of the password. I tried the password, enclosing in single-quotes, double-quotes and no-quotes and resulted in the same error message.

[arrownj]

Hi @jiasli , could you please help with this ?

[yonzhan]

add to S166.

[qianwens]

@krishjag , this is a known issue in python that the leading character '-' will confusing the argument parser to make it as an option name. #7054 . You can fix this issue by adding '=' between the option name and value : az login --username=$azureUserName --password=$azurePassword