Add certificate based authentication for data provider using an Azure AD Application

[raggadhub]

Add certificate based authentication for data provider using an Azure AD Application

[ianhelle]

Hi raggadhub.
Some of this is already supported. E.g. if you have a certificate locally you can use Azure cert-based authentication, using auth_types=["certificate"].
I haven't tried this myself.
Also would be worth looking at the azure_kusto_driver -

msticpy/msticpy/data/drivers/azure_kusto_driver.py

Line 591 in da400e1

def _create_kql_cert_connection_str(

I'm not 100% certain whether this is consistent for all Azure endpoints - I think adding the cert into the connection string is probably somewhat specific to Kusto.

[raggadhub]

Hi Ian,

Many thanks for your clear answers, I will try and keep you informed.

[ianhelle]

BTW I've submitted a PR that lets you use the Environment credential (auth_types=["env"] to provide a path to a certificate.
Not sure if this helps.
https://learn.microsoft.com/en-us/python/api/azure-identity/azure.identity.environmentcredential?view=azure-python
This only works (as far as I can make out) for certs held in files (vs. in your local cert store - if you have this you can export to a PKCS12 cert/key file.