AzureAD / microsoft-authentication-library-for-python

Microsoft Authentication Library (MSAL) for Python makes it easy to authenticate to Microsoft Entra ID. General docs are available here https://learn.microsoft.com/entra/msal/python/ Stable APIs are documented here https://msal-python.readthedocs.io. Questions can be asked on www.stackoverflow.com with tag "msal" + "python".
https://stackoverflow.com/questions/tagged/azure-ad-msal+python
Other
754 stars 191 forks source link

[Feature Request] Support PFX certificate authentication #684

Closed jiasli closed 1 month ago

jiasli commented 2 months ago

MSAL client type

Confidential

Problem Statement

MSAL currently requires PEM certificate for ConfidentialClientApplication:

https://github.com/AzureAD/microsoft-authentication-library-for-python/blob/52b1fc5a442ff5dd33f48ce717f1032c8002ea9e/msal/application.py#L226-L228

The conversion logic is deferred to downstream application, such as Azure Identity library.

Proposed solution

MSAL itself can support PFX certificate authentication so that other clients such as Azure CLI can also benefit from it.

See https://github.com/Azure/azure-cli/issues/28699

rayluo commented 2 months ago

See also the first comment in #685

rayluo commented 1 month ago

Documented in the last paragraph of this parameter.