Generate access token for a Managed identity

[pievalentin]

Bug description

I am an Azure costumer. I can't use MSAL to generate an access token for the scope of my app reg using my managed identity.

I have this setup:

• I deployed an Azure function app that is validating access token of an Application registration. It checks that the Client has the correct role.
• I have a compute instance that is assigned a Managed identity. I want to send a HTTP request to my azure function with an access token generated for my Managed Identity.

It might be related to #58

To Reproduce

1. Create an app reg with a custom role
2. Create a managed identity
3. Assign the custom role to the managed identity
4. Create a compute instance and assigned it the managed identity
5. In the compute instance run:

from azure.identity import ManagedIdentityCredential
cred = ManagedIdentityCredential(client_id="<managed-identity-client-id>")
token = cred.get_token("api://<app-reg-client-id>/.default")

The code will run indefinitely

Expected behavior
After running token = cred.get_token("api://<app-reg-client-id>/.default") the token should be generated

What you see instead

Code is still running and no token is generated.

The MSAL Python version you are using
1.21.0

[rayluo]

Hi @pievalentin , your code snippet is using a different library, Azure SDK for Python, so, you would want to create a similar github issue there.

This repo here is about Microsoft Authentication Library (MSAL) for Python. MSAL Python is currently implementing Managed Identity feature. If you are interested in trying out the bleeding edge, you can follow the instruction in #480 to try it out.

[pievalentin]

Oh my bad. Thanks a lot for the kind and fast help @rayluo. Will try what you suggested on my company laptop tomorrow morning!

[pievalentin]

My azureml environment is very restricted (SSL inspection), I have some trouble installing your draft PR. I am still working on it.

[bgavrilMS]

@rayluo - is this PR not merged? I though MSAL Py supports MI now. Can you please post a link to the sample and docs?