Skip to main content Skills Marktplatz Entdecken und erkunden Sie KI-Skills, die von der Community erstellt wurden.
Mit Codex oder Claude installieren Kopieren Sie diesen Prompt, fügen Sie ihn in Codex, Claude oder einen anderen Assistant ein und lassen Sie die Skill-Seite prüfen und installieren.
Prompt-Details anzeigen Ein direkter Befehl überspringt den Prüf-Prompt. Prüfen Sie die Quelle, bevor Sie ihn ausführen.
npx skills add https://github.com/BEKO2210/Firstbrain --skill azure-identity-javaDer Befehl bleibt in einer Zeile. Scrollen Sie horizontal, um ihn vor dem Kopieren vollständig zu prüfen.
Sie bevorzugen eine lokale Kopie? Laden Sie die Dateien herunter, die SkillsMP derzeit vorliegen.
ZIP herunterladen Herunterladen... Mehr aus diesem Repository Verwandte Berufe SOC
Basierend auf der SOC-Berufsklassifikation
name azure-identity-java description Authenticate Java applications with Azure services using Microsoft Entra ID (Azure AD). type skill created 2026-02-27T00:00:00.000Z domain cloud-infrastructure category azure risk unknown source community tags ["skill","cloud-infrastructure","azure","identity"]
Azure Identity (Java)
Authenticate Java applications with Azure services using Microsoft Entra ID (Azure AD).
Installation
<dependency >
<groupId > com.azure</groupId >
<artifactId > azure-identity</artifactId >
<version > 1.15.0</version >
</dependency >
Key Concepts
Credential Use Case DefaultAzureCredentialRecommended - Works in dev and productionManagedIdentityCredentialAzure-hosted apps (App Service, Functions, VMs) EnvironmentCredentialCI/CD pipelines with env vars ClientSecretCredentialService principals with secret ClientCertificateCredentialService principals with certificate AzureCliCredentialLocal dev using az login InteractiveBrowserCredentialInteractive login flow DeviceCodeCredentialHeadless device authentication
DefaultAzureCredential (Recommended)
The DefaultAzureCredential tries multiple authentication methods in order:
Environment variables
Workload Identity
Managed Identity
Azure CLI
Azure PowerShell
Azure Developer CLI
import com.azure.identity.DefaultAzureCredential;
import com.azure.identity.DefaultAzureCredentialBuilder;
DefaultAzureCredential
credential
=
new
DefaultAzureCredentialBuilder
BlobServiceClient
blobClient
=
new
BlobServiceClientBuilder
"https://<storage-account>.blob.core.windows.net"
KeyClient
keyClient
=
new
KeyClientBuilder
"https://<vault-name>.vault.azure.net"
Configure DefaultAzureCredential DefaultAzureCredential credential = new DefaultAzureCredentialBuilder ()
.managedIdentityClientId("<user-assigned-identity-client-id>" )
.tenantId("<tenant-id>" )
.excludeEnvironmentCredential()
.excludeAzureCliCredential()
.build();
Managed Identity For Azure-hosted applications (App Service, Functions, AKS, VMs).
import com.azure.identity.ManagedIdentityCredential;
import com.azure.identity.ManagedIdentityCredentialBuilder;
ManagedIdentityCredential credential = new ManagedIdentityCredentialBuilder ()
.build();
ManagedIdentityCredential credential = new ManagedIdentityCredentialBuilder ()
.clientId("<user-assigned-client-id>" )
.build();
ManagedIdentityCredential credential = new ManagedIdentityCredentialBuilder ()
.resourceId("/subscriptions/<sub>/resourceGroups/<rg>/providers/Microsoft.ManagedIdentity/userAssignedIdentities/<name>" )
.build();
Service Principal with Secret import com.azure.identity.ClientSecretCredential;
import com.azure.identity.ClientSecretCredentialBuilder;
ClientSecretCredential credential = new ClientSecretCredentialBuilder ()
.tenantId("<tenant-id>" )
.clientId("<client-id>" )
.clientSecret("<client-secret>" )
.build();
Service Principal with Certificate import com.azure.identity.ClientCertificateCredential;
import com.azure.identity.ClientCertificateCredentialBuilder;
ClientCertificateCredential credential = new ClientCertificateCredentialBuilder ()
.tenantId("<tenant-id>" )
.clientId("<client-id>" )
.pemCertificate("<path-to-cert.pem>" )
.build();
ClientCertificateCredential credential = new ClientCertificateCredentialBuilder ()
.tenantId("<tenant-id>" )
.clientId("<client-id>" )
.pfxCertificate("<path-to-cert.pfx>" , "<pfx-password>" )
.build();
ClientCertificateCredential credential = new ClientCertificateCredentialBuilder ()
.tenantId("<tenant-id>" )
.clientId("<client-id>" )
.pemCertificate("<path-to-cert.pem>" )
.sendCertificateChain(true )
.build();
Environment Credential Reads credentials from environment variables.
import com.azure.identity.EnvironmentCredential;
import com.azure.identity.EnvironmentCredentialBuilder;
EnvironmentCredential credential = new EnvironmentCredentialBuilder ().build();
Required Environment Variables For service principal with secret:
AZURE_TENANT_ID=<tenant-id>
AZURE_CLIENT_ID=<client-id>
AZURE_CLIENT_SECRET=<client-secret>
For service principal with certificate:
AZURE_TENANT_ID=<tenant-id>
AZURE_CLIENT_ID=<client-id>
AZURE_CLIENT_CERTIFICATE_PATH=/path/to/cert.pem
AZURE_CLIENT_CERTIFICATE_PASSWORD=<optional-password>
AZURE_TENANT_ID=<tenant-id>
AZURE_CLIENT_ID=<client-id>
AZURE_USERNAME=<username>
AZURE_PASSWORD=<password>
Azure CLI Credential For local development using az login.
import com.azure.identity.AzureCliCredential;
import com.azure.identity.AzureCliCredentialBuilder;
AzureCliCredential credential = new AzureCliCredentialBuilder ()
.tenantId("<tenant-id>" )
.build();
Interactive Browser For desktop applications requiring user login.
import com.azure.identity.InteractiveBrowserCredential;
import com.azure.identity.InteractiveBrowserCredentialBuilder;
InteractiveBrowserCredential credential = new InteractiveBrowserCredentialBuilder ()
.clientId("<client-id>" )
.redirectUrl("http://localhost:8080" )
.build();
Device Code For headless devices (IoT, CLI tools).
import com.azure.identity.DeviceCodeCredential;
import com.azure.identity.DeviceCodeCredentialBuilder;
DeviceCodeCredential credential = new DeviceCodeCredentialBuilder ()
.clientId("<client-id>" )
.challengeConsumer(challenge -> {
System.out.println(challenge.getMessage());
})
.build();
Chained Credential Create custom authentication chains.
import com.azure.identity.ChainedTokenCredential;
import com.azure.identity.ChainedTokenCredentialBuilder;
ChainedTokenCredential credential = new ChainedTokenCredentialBuilder ()
.addFirst(new ManagedIdentityCredentialBuilder ().build())
.addLast(new AzureCliCredentialBuilder ().build())
.build();
Workload Identity (AKS) For Azure Kubernetes Service with workload identity.
import com.azure.identity.WorkloadIdentityCredential;
import com.azure.identity.WorkloadIdentityCredentialBuilder;
WorkloadIdentityCredential credential = new WorkloadIdentityCredentialBuilder ().build();
WorkloadIdentityCredential credential = new WorkloadIdentityCredentialBuilder ()
.tenantId("<tenant-id>" )
.clientId("<client-id>" )
.tokenFilePath("/var/run/secrets/azure/tokens/azure-identity-token" )
.build();
Token Caching Enable persistent token caching for better performance.
DefaultAzureCredential credential = new DefaultAzureCredentialBuilder ()
.enableAccountIdentifierLogging()
.build();
SharedTokenCacheCredential credential = new SharedTokenCacheCredentialBuilder ()
.clientId("<client-id>" )
.build();
Sovereign Clouds import com.azure.identity.AzureAuthorityHosts;
DefaultAzureCredential govCredential = new DefaultAzureCredentialBuilder ()
.authorityHost(AzureAuthorityHosts.AZURE_GOVERNMENT)
.build();
DefaultAzureCredential chinaCredential = new DefaultAzureCredentialBuilder ()
.authorityHost(AzureAuthorityHosts.AZURE_CHINA)
.build();
Error Handling import com.azure.identity.CredentialUnavailableException;
import com.azure.core.exception.ClientAuthenticationException;
try {
DefaultAzureCredential credential = new DefaultAzureCredentialBuilder ().build();
AccessToken token = credential.getToken(new TokenRequestContext ()
.addScopes("https://management.azure.com/.default" ));
} catch (CredentialUnavailableException e) {
System.out.println("Authentication failed: " + e.getMessage());
} catch (ClientAuthenticationException e) {
System.out.println("Auth error: " + e.getMessage());
}
Logging Enable authentication logging for debugging.
DefaultAzureCredential credential = new DefaultAzureCredentialBuilder ()
.enableAccountIdentifierLogging()
.build();
Environment Variables
AZURE_TENANT_ID=<tenant-id>
AZURE_CLIENT_ID=<client-id>
AZURE_CLIENT_SECRET=<client-secret>
AZURE_CLIENT_ID=<user-assigned-mi-client-id>
AZURE_FEDERATED_TOKEN_FILE=/var/run/secrets/azure/tokens/azure-identity-token
AZURE_LOG_LEVEL=verbose
AZURE_AUTHORITY_HOST=https://login.microsoftonline.com/
Best Practices
Use DefaultAzureCredential - Works seamlessly from dev to productionManaged Identity in Production - No secrets to manage, automatic rotationAzure CLI for Local Dev - Run az login before running your appLeast Privilege - Grant only required permissions to service principalsToken Caching - Enabled by default, reduces auth round-tripsEnvironment Variables - Use for CI/CD, not hardcoded secrets
Credential Selection Matrix Environment Recommended Credential Local Development DefaultAzureCredential (uses Azure CLI)Azure App Service DefaultAzureCredential (uses Managed Identity)Azure Functions DefaultAzureCredential (uses Managed Identity)Azure Kubernetes Service WorkloadIdentityCredentialAzure VMs DefaultAzureCredential (uses Managed Identity)CI/CD Pipeline EnvironmentCredentialDesktop App InteractiveBrowserCredentialCLI Tool DeviceCodeCredential
Trigger Phrases
"Azure authentication Java", "DefaultAzureCredential Java"
"managed identity Java", "service principal Java"
"Azure login Java", "Azure credentials Java"
"AZURE_CLIENT_ID", "AZURE_TENANT_ID"
When to Use This skill is applicable to execute the workflow or actions described in the overview.
Connections
Domain: [[Cloud & Infrastruktur]]Kategorie: [[Microsoft Azure]]Navigation: [[Skills Uebersicht]], [[Home]] 