Share via

az containerapp auth microsoft

Manage containerapp authentication and authorization of the Microsoft identity provider.

Commands

Name Description Type Status
az containerapp auth microsoft show

Show the authentication settings for the Azure Active Directory identity provider.

 Core GA
az containerapp auth microsoft update

Update the client id and client secret for the Azure Active Directory identity provider.

 Core GA

az containerapp auth microsoft show

Edit

Show the authentication settings for the Azure Active Directory identity provider.

az containerapp auth microsoft show [--ids]
                                    [--name]
                                    [--resource-group]
                                    [--subscription]

Examples

Show the authentication settings for the Azure Active Directory identity provider.

az containerapp auth microsoft show --name my-containerapp --resource-group MyResourceGroup

Optional Parameters

The following parameters are optional, but depending on the context, one or more might become required for the command to execute successfully.

--ids

One or more resource IDs (space-delimited). It should be a complete resource ID containing all information of 'Resource Id' arguments. You should provide either --ids or other 'Resource Id' arguments.

Property Value
Parameter group: Resource Id Arguments
--name -n

The name of the Containerapp. A name must consist of lower case alphanumeric characters or '-', start with a letter, end with an alphanumeric character, cannot have '--', and must be less than 32 characters.

Property Value
Parameter group: Resource Id Arguments
--resource-group -g

Name of resource group. You can configure the default group using az configure --defaults group=<name>.

Property Value
Parameter group: Resource Id Arguments
--subscription

Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID.

Property Value
Parameter group: Resource Id Arguments
Global Parameters
--debug

Increase logging verbosity to show all debug logs.

Property Value
Default value: False
--help -h

Show this help message and exit.

--only-show-errors

Only show errors, suppressing warnings.

Property Value
Default value: False
--output -o

Output format.

Property Value
Default value: json
Accepted values: json, jsonc, none, table, tsv, yaml, yamlc
--query

JMESPath query string. See http://jmespath.org/ for more information and examples.

--verbose

Increase logging verbosity. Use --debug for full debug logs.

Property Value
Default value: False

az containerapp auth microsoft update

Edit

Update the client id and client secret for the Azure Active Directory identity provider.

az containerapp auth microsoft update [--allowed-audiences --allowed-token-audiences]
                                      [--certificate-issuer --client-secret-certificate-issuer]
                                      [--client-id]
                                      [--client-secret]
                                      [--client-secret-certificate-san --san]
                                      [--client-secret-certificate-thumbprint --thumbprint]
                                      [--client-secret-name]
                                      [--ids]
                                      [--issuer]
                                      [--name]
                                      [--resource-group]
                                      [--subscription]
                                      [--tenant-id]
                                      [--yes]

Examples

Update the open id issuer, client id and client secret for the Azure Active Directory identity provider.

az containerapp auth microsoft update  -g myResourceGroup --name my-containerapp \
  --client-id my-client-id --client-secret very_secret_password \
  --issuer https://sts.windows.net/54826b22-38d6-4fb2-bad9-b7983a3e9c5a/

Optional Parameters

The following parameters are optional, but depending on the context, one or more might become required for the command to execute successfully.

--allowed-audiences --allowed-token-audiences

The configuration settings of the allowed list of audiences from which to validate the JWT token.

--certificate-issuer --client-secret-certificate-issuer

Alternative to AAD Client Secret and thumbprint, issuer of a certificate used for signing purposes.

--client-id

The Client ID of the app used for login.

--client-secret

The client secret.

--client-secret-certificate-san --san

Alternative to AAD Client Secret and thumbprint, subject alternative name of a certificate used for signing purposes.

--client-secret-certificate-thumbprint --thumbprint

Alternative to AAD Client Secret, thumbprint of a certificate used for signing purposes.

--client-secret-name

The app secret name that contains the client secret of the relying party application.

--ids

One or more resource IDs (space-delimited). It should be a complete resource ID containing all information of 'Resource Id' arguments. You should provide either --ids or other 'Resource Id' arguments.

Property Value
Parameter group: Resource Id Arguments
--issuer

The OpenID Connect Issuer URI that represents the entity which issues access tokens for this application.

--name -n

The name of the Containerapp. A name must consist of lower case alphanumeric characters or '-', start with a letter, end with an alphanumeric character, cannot have '--', and must be less than 32 characters.

Property Value
Parameter group: Resource Id Arguments
--resource-group -g

Name of resource group. You can configure the default group using az configure --defaults group=<name>.

Property Value
Parameter group: Resource Id Arguments
--subscription

Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID.

Property Value
Parameter group: Resource Id Arguments
--tenant-id

The tenant id of the application.

--yes -y

Do not prompt for confirmation.

Property Value
Default value: False
Global Parameters
--debug

Increase logging verbosity to show all debug logs.

Property Value
Default value: False
--help -h

Show this help message and exit.

--only-show-errors

Only show errors, suppressing warnings.

Property Value
Default value: False
--output -o

Output format.

Property Value
Default value: json
Accepted values: json, jsonc, none, table, tsv, yaml, yamlc
--query

JMESPath query string. See http://jmespath.org/ for more information and examples.

--verbose

Increase logging verbosity. Use --debug for full debug logs.

Property Value
Default value: False