The Missing Intro To Flexible Federated Identity Credentials

Instead of you having to store separate passwords for Azure in GitHub, or GitHub secrets in Azure, you can tell Entra ID (and by proxy - Azure) that you have a vendor (such as GitHub’s OpenID Connect provider) that gave you a wristband that it can trust to give you access to all the rides (Azure resources). get ( 'GITHUB_TOKEN' ) if not token : raise ValueError ( "GITHUB_TOKEN is not set" ) return token credential = ClientAssertionCredential ( RESOURCE_TENANT_ID , APP_CLIENT_ID , lambda : get_github_token () ) client = SecretClient ( vault_url = 'URL_TO_MY_KEY_VAULT' , credential = credential ) secret_name = 'SuperSecretString' retrieved_secret = client .