Pages

29 February, 2024

Azure Functions Credential uses wrong tenant

I am trying to run Azure Function written in python from VSCode.
No matter what I try, I get this error or similar - always the same tenant which I have no idea where it came from.


Various ways of getting credential:
credential = AzureCliCredential(tenant_id=os.environ["AZURE_TENANT_ID"])
credential = DefaultAzureCredential()
credential = EnvironmentCredential()



I have also tried to set local.settings.json (which sets environment variables)
{
"IsEncrypted": false,
"Values": {
"FUNCTIONS_WORKER_RUNTIME": "python",
"AzureWebJobsStorage": "UseDevelopmentStorage=true",
"AZURE_TENANT_ID": "ad8d36e3-7a5d-4687-bef3-e758fc4f7649",
"AZURE_CLIENT_ID":"xxxxxxxxxxxxxxxx",
"AZURE_CLIENT_SECRET":"xxxxxxxxxxxxxx",
"AZURE_AUTHORITY_HOST":"login.microsoftonline.com"
}
}


The current credential is not configured to acquire tokens for tenant 49793faf-eb3f-4d99-a0cf-aef7cce79dc1. To enable acquiring tokens for this tenant add it to the additionally_allowed_tenants when creating the credential, or add "" to additionally_allowed_tenants to allow acquiring tokens for any tenant.*


It consistently uses the wrong tenant which sometimes appears as "American Airlines" in other error messages.


I have cleared out all the various Azure logins, so the DefaultAzureCredential fails not finding any login configurations.


I have tried:
az login --tenant-id xxx
azd auth login
etc...


This worked recently, and then I had to reboot.


Where is the login logic pulling tenant 49793faf-eb3f-4d99-a0cf-aef7cce79dc1. from ?
How do I get rid of it ?

No comments:

Post a Comment

Thanks