Azure Identity for Java: Simplified Credential Management

The Azure Identity SDK eliminates credential management complexity by providing a unified authentication model across all environments. From local development using Azure CLI credentials to production deployment with managed identities, your code remains unchanged while security improves.

What This Skill Does

Provides DefaultAzureCredential for automatic credential resolution, managed identity support for Azure deployments, service principal authentication for automation, interactive browser flows for user auth, and token caching for performance.

Getting Started

<dependency>
    <groupId>com.azure</groupId>
    <artifactId>azure-identity</artifactId>
</dependency>

Use DefaultAzureCredential everywhere:

import com.azure.identity.DefaultAzureCredentialBuilder;
import com.azure.security.keyvault.secrets.SecretClient;

var credential = new DefaultAzureCredentialBuilder().build();
var client = new SecretClientBuilder()
    .vaultUrl("https://myvault.vault.azure.net")
    .credential(credential)
    .buildClient();

Key Features

DefaultAzureCredential chains: environment variables → managed identity → Azure CLI → IntelliJ → VS Code. ManagedIdentityCredential uses Azure's built-in identity system. ClientSecretCredential supports service principals. DeviceCodeCredential enables headless authentication.

When to Use

Use for all Azure SDK authentication, eliminating hardcoded secrets, implementing zero-trust patterns, and supporting dev/staging/prod with one configuration. This should be your default authentication choice.

Source

Maintained by Microsoft. View on GitHub