CLOUD DEVELOPMENT / microsoft
Azure Identity for Python
Select and diagnose Entra credential chains across development, hosted workloads and delegated access.
“Azure Identity SDK for Python authentication with Microsoft Entra ID. Use for DefaultAzureCredential, managed identity, service principals, and token caching. Triggers: "azure-identity", "DefaultAzureCredential", "authentication", "managed identity", "service principal", "credential". ”
01 / THE REASONING
Why this made the selection.
- The package floor is Python 3.9, and the certificate class the file tells you to import is CertificateCredential, not ClientCertificateCredential.
- Interactive browser login is excluded from DefaultAzureCredential unless the caller turns that exclusion off.
- The definition routes environment-specific credential types, documents require_envvar and separates token-provider helpers from normal SDK client integration.
- Constrain a production workload to its intended identity
02 / THE REVIEW RECORD
What we actually inspected.
Source review has boundaries.
A clear record is more useful than a “safe” badge.
Material inspected
- .github/plugins/azure-sdk-python/skills/azure-identity-py/SKILL.md
- .github/plugins/azure-sdk-python/skills/azure-identity-py/references/non-hero-scenarios.md
- LICENSE
- README.md
Our findings
- Token requests go to Microsoft Entra. The file says never to hardcode secrets, and it prefers managed identity in Azure.
- DefaultAzureCredential skips the interactive browser unless exclude_interactive_browser_credential is set false. Python older than 3.9 is outside the stated support line.
- It does not perform the Azure resource operation. Sovereign-cloud examples are in the non-hero reference, not in the main samples.
- The definition routes environment-specific credential types, documents require_envvar and separates token-provider helpers from normal SDK client integration.
Not established by this review
- The resource was not executed and its tools were not called.
- No credential was constructed and no token was requested.
- No skill execution, authenticated service operation, or outcome benchmark was performed.
- Not executed: it was not installed or run.
The review applies to the material and revision named here. A newer upstream release can change its behavior.
03 / PUT IT TO WORK
Add a skill to your workflow.
DOCUMENTED COMMAND
npx skills add microsoft/skills/.github/plugins/azure-sdk-python/skills/azure-identity-pyRun in your terminal to choose your AI tools, project or global scope, and installation method. This short command follows the current upstream version; the review covers the revision shown above.
Optional: install the reviewed revision
Keeps the original source and installer version where recorded, while leaving your AI tools and installation scope for you to choose.
npx skills add https://github.com/microsoft/skills/tree/fc164ba1d7a0c10377dbcc1c9ac07253b9329fdb/.github/plugins/azure-sdk-python/skills/azure-identity-py- Install the pinned skill directory interactively, retaining its bundled references and scripts.
- Choose an explicit credential or a constrained chain for the environment; verify tenant, authority and user-assigned identity selection.
- Use context managers for owned transports and inspect credential-specific failure details without logging tokens.
Before you start
- Python, matching Azure SDK packages and azure-identity
- Authorized Azure resources and operation-specific roles
04 / FOLLOW THE EVIDENCE
The source trail.
Our notes are separate from the original resource.
Check upstream before adopting a new version.
- Pinned skill definition ↗Checked
https://github.com/microsoft/skills/blob/fc164ba1d7a0c10377dbcc1c9ac07253b9329fdb/.github/plugins/azure-sdk-python/skills/azure-identity-py/SKILL.md
Supports: summary, whySelected, bestFor, limitations, install, access, review
https://github.com/microsoft/skills/blob/fc164ba1d7a0c10377dbcc1c9ac07253b9329fdb/README.md
Supports: install
- MIT licence ↗Checked
https://github.com/microsoft/skills/blob/fc164ba1d7a0c10377dbcc1c9ac07253b9329fdb/LICENSE
Supports: license
https://raw.githubusercontent.com/microsoft/skills/fc164ba1d7a0c10377dbcc1c9ac07253b9329fdb/.github/plugins/azure-sdk-python/skills/azure-identity-py/SKILL.md
Supports: upstreamDescription, limitations, review.notTested