OSOE-598: Add entra authentication for live metrics

Lombiq.Hosting.Azure.ApplicationInsights/ApplicationInsightsOptions.cs

@@ -28,7 +28,7 @@ public class ApplicationInsightsOptions
     /// documentation for more info: <see
     /// href="https://docs.microsoft.com/en-us/azure/azure-monitor/app/live-stream#secure-the-control-channel"/>.
     /// </summary>
-    [Obsolete("Microsoft Entra authentication is the only supported method from September 30, 2025. API key authentication will be removed")]
+    [Obsolete("Microsoft Entra authentication is the only supported method from 30 September 2025. API key authentication will be removed.")]
     public string QuickPulseTelemetryModuleAuthenticationApiKey { get; set; }
 
     /// <summary>
@@ -70,6 +70,14 @@ public class ApplicationInsightsOptions
     /// </summary>
     public bool EnableClientSideTracking { get; set; } = true;
 
+    /// <summary>
+    /// Gets or sets a value indicating whether local development is enabled where telemetry is sent to
+    /// Azure Application Insights from the local instance.
+    /// Will only work if local authentication is enabled in the properties of the Applications Insights resource
+    /// which should only be the case during development and testing.
+    /// </summary>
+    public bool EnableLocalDevelopment { get; set; }
+
     /// <summary>
     /// Gets or sets a value indicating whether to work in kind of a debug mode completely offline. Telemetry will still
     /// show up in the Debug window.

Lombiq.Hosting.Azure.ApplicationInsights/Extensions/ApplicationInsightsInitializerExtensions.cs

@@ -24,13 +24,6 @@ public static class ApplicationInsightsInitializerExtensions
         IConfiguration configurationManager)
     {
         var services = builder.ApplicationServices;
-
-        services.Configure<TelemetryConfiguration>(config =>
-        {
-            var credential = new ManagedIdentityCredential();
-            config.SetAzureTokenCredential(credential);
-        });
-
         services.AddApplicationInsightsTelemetry(configurationManager);
 
         // Create a temporary ServiceProvider to configure ApplicationInsightsServiceOptions.
@@ -43,6 +36,20 @@ public static class ApplicationInsightsInitializerExtensions
             .GetSection("OrchardCore:Lombiq_Hosting_Azure_ApplicationInsights");
         applicationInsightsConfigSection.Bind(applicationInsightsOptions);
 
+        services.Configure<TelemetryConfiguration>(config =>
+        {
+            if (applicationInsightsOptions.EnableLocalDevelopment)
+            {
+                var credential = new DefaultAzureCredential();
+                config.SetAzureTokenCredential(credential);
+            }
+            else
+            {
+                var credential = new ManagedIdentityCredential();
+                config.SetAzureTokenCredential(credential);
+            }
+        });
+
         if (string.IsNullOrEmpty(applicationInsightsServiceOptions?.ConnectionString) &&
 #pragma warning disable CS0618 // Type or member is obsolete
             string.IsNullOrEmpty(applicationInsightsServiceOptions?.InstrumentationKey) &&

Lombiq.Hosting.Azure.ApplicationInsights/Lombiq.Hosting.Azure.ApplicationInsights.csproj

@@ -34,7 +34,7 @@
   </ItemGroup>
 
   <ItemGroup>
-    <PackageReference Include="Microsoft.ApplicationInsights.AspNetCore" Version="2.21.0" />
+    <PackageReference Include="Microsoft.ApplicationInsights.AspNetCore" Version="2.22.0" />
     <PackageReference Include="OrchardCore.Media.Azure" Version="1.8.0" />
     <PackageReference Include="OrchardCore.Module.Targets" Version="1.8.0" />
     <PackageReference Include="OrchardCore.ContentManagement" Version="1.8.0" />

Readme.md

@@ -86,15 +86,15 @@ The module has its own configuration for further options. These need to come fro
   },
   "OrchardCore": {
     "Lombiq_Hosting_Azure_ApplicationInsights": {
-      // Deprecated, do not use in new projects 
+      // Deprecated, do not use in new projects.
       "QuickPulseTelemetryModuleAuthenticationApiKey": "your API key here"
     }
   }
 }
 
 ```
 
-> ⚠ Use of QuickPulseTelemetryModuleAuthenticationApiKey is deprecated and will be officially unsupported starting September 30, 2025. See [Entra Authentication](#entra-authentication) for more information.
+> ⚠ Use of QuickPulseTelemetryModuleAuthenticationApiKey is deprecated and will be officially unsupported starting 30 September 2025. See [Entra Authentication](#entra-authentication) for more information.
 
 See the [`ApplicationInsightsOptions` class](Lombiq.Hosting.Azure.ApplicationInsights/ApplicationInsightsOptions.cs) for all options and details.
 
@@ -104,11 +104,25 @@ If you use the security defaults from [Lombiq Helpful Libraries - Orchard Core L
 
 ### Entra Authentication
 
-Starting September 30, 2025, authentication using API keys is no longer supported. Instead, you'll have to set up Entra Authentication.
+Starting 30 September 2025, authentication using API keys is no longer supported. Instead, you'll have to set up Entra Authentication.
 
 To set up Entra Authentication follow the steps that most closely match your situation over at [Microsoft Entra authentication for Application Insights](https://learn.microsoft.com/en-us/azure/azure-monitor/app/azure-ad-authentication?tabs=net)
 
-Once Entra Authentication is set up and the ConnectionString has been properly set, live metrics should be flowing in.
+Once Entra Authentication is set up and the `ConnectionString` has been properly set, live metrics should be flowing in.
+
+If you want to stream local metrics to Application Insights, you should set the `EnableLocalDevelopment` option to `true` in the `Lombiq_Hosting_Azure_ApplicationInsights` section of your configuration.
+
+```json5
+{
+  "OrchardCore": {
+    "Lombiq_Hosting_Azure_ApplicationInsights": {
+      "EnableLocalDevelopment": true
+    }
+  }
+}
+```
+
+> ⚠ Logging local metrics to Application Insights is only recommended for development purposes. And only works when local development is enabled on the Application Insights resource in Azure. Once you are ready to deploy to staging/production environments, you should disable local development.
 
 ### Using collected data