[Feature Request] For managed identity authentication, replace `--username` with `--client-id`, `--object-id` and `--resource-id`

[jiasli]

Related command
az login --identity

Is your feature request related to a problem? Please describe.
As mentioned in AzureAD/microsoft-authentication-library-for-python#480 (comment), Azure CLI does not surface an "identity ID type" concept, therefore the usage pattern is based on trial-and-error:

azure-cli/src/azure-cli-core/azure/cli/core/_profile.py

Lines 229 to 253 in 235c355

	authenticated = False
	from azure.cli.core.azclierror import AzureResponseError
	try:
	msi_creds = MSIAuthenticationWrapper(resource=resource, client_id=identity_id)
	identity_type = MsiAccountTypes.user_assigned_client_id
	authenticated = True
	except AzureResponseError as ex:
	if 'http error: 400, reason: Bad Request' in ex.error_msg:
	logger.info('Sniff: not an MSI client id')
	else:
	raise
	if not authenticated:
	try:
	identity_type = MsiAccountTypes.user_assigned_object_id
	msi_creds = MSIAuthenticationWrapper(resource=resource, object_id=identity_id)
	authenticated = True
	except AzureResponseError as ex:
	if 'http error: 400, reason: Bad Request' in ex.error_msg:
	logger.info('Sniff: not an MSI object id')
	else:
	raise
	if not authenticated:
	raise CLIError('Failed to connect to MSI, check your managed service identity id.')

Reusing --username for 3 types of IDs is inefficient and can be confusing to command readers (#29198 (comment)).

Describe the solution you'd like
Replace --username with --client-id, --object-id and --resource-id for managed identity authentication.

Describe alternatives you've considered

Additional context
--service-principal may require similar changes: #29481

[yonzhan]

Thank you for opening this issue, we will look into it.

[github-actions]

Here are some similar issues that might help you. Please check if they can solve your problem.

• For service principal authentication, replace --username with --client-id, replace --password with --client-secret, --certificate #29481

[jiasli]

Azure PowerShell cmdlet Connect-AzAccount only supports client ID and Resource ID via -AccountId. Object ID is not supported: https://learn.microsoft.com/en-us/powershell/module/az.accounts/connect-azaccount?view=azps-12.1.0#-accountid