AzureAD/microsoft-authentication-library-for-python

AcquireTokenForManagedIdentity should throw if a user-assigned managed identity clientID or resourceID is supplied when not supported

bgavrilMS opened this issue · 1 comments

The following ManagedIdentitySources do not currently support user-assigned managed identities:

AzureArc, CloudShell, ServiceFabric

If a user-assigned clientId or resourceId is specified for these sources, we should throw with a message similar to:

https://github.com/AzureAD/microsoft-authentication-library-for-dotnet/blob/5c7c527b173b5f2a719926fb89ccd68bc55d1b3e/src/client/Microsoft.Identity.Client/MsalErrorMessage.cs#L424

This behavior should be consistent cross-language.

Original issue:

AzureAD/microsoft-authentication-library-for-dotnet#4837

Discussed here. Feel free to reopen this issue if a discrepancy will be observed.