azure-identity-rust

Azure Identity SDK for Rust

Authentication library for Azure SDK clients using Microsoft Entra ID (formerly Azure AD).

Installation

cargo add azure_identity

Environment Variables

# Service Principal (for production/CI)
AZURE_TENANT_ID=<your-tenant-id>
AZURE_CLIENT_ID=<your-client-id>
AZURE_CLIENT_SECRET=<your-client-secret>

# User-assigned Managed Identity (optional)
AZURE_CLIENT_ID=<managed-identity-client-id>

DeveloperToolsCredential

The recommended credential for local development. Tries developer tools in order (Azure CLI, Azure Developer CLI):

use azure_identity::DeveloperToolsCredential;
use azure_security_keyvault_secrets::SecretClient;

let credential = DeveloperToolsCredential::new(None)?;
let client = SecretClient::new(
    "https://my-vault.vault.azure.net/",
    credential.clone(),
    None,
)?;

Credential Chain Order

Order	Credential	Environment
1	AzureCliCredential	az login
2	AzureDeveloperCliCredential	azd auth login

Credential Types

Credential	Usage
DeveloperToolsCredential	Local development - tries CLI tools
ManagedIdentityCredential	Azure VMs, App Service, Functions, AKS
WorkloadIdentityCredential	Kubernetes workload identity
ClientSecretCredential	Service principal with sec