Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[enhancement]: AzureCLIV2 - Support SNI (Subject Name + Issuer) validation / send x5c claim in the JWT header #19912

Closed
ohads-MSFT opened this issue May 27, 2024 · 1 comment

Comments

@ohads-MSFT
Copy link

ohads-MSFT commented May 27, 2024

Task name

AzureCLIV2

Describe your feature request here

Consider the current code:

Utility.throwIfError(tl.execSync("az", `login --service-principal -u "${servicePrincipalId}" --password="${escapedCliPassword}" --tenant "${tenantId}" --allow-no-subscriptions`), tl.loc("LoginFailed"));

Please add the --use-cert-sn-issuer to the list of arguments passed to az login:

Used with a service principal configured with Subject Name and Issuer Authentication in order to support automatic certificate rolls.

Reference: https://learn.microsoft.com/en-us/cli/azure/reference-index?view=azure-cli-latest#az-login-optional-parameters
Similar issue: #6860

@ohads-MSFT ohads-MSFT changed the title [enhancement]: Support SNI (Subject Name + Issuer) validation / send x5c claim in the JWT header [enhancement]: AzureCLIV2 - Support SNI (Subject Name + Issuer) validation / send x5c claim in the JWT header May 27, 2024
Copy link

This issue is stale because it has been open for 180 days with no activity. Remove the stale label or comment on the issue otherwise this will be closed in 5 days

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant