Skip to main content
Sign in Dashboard Get started
  1. Docs
  2. Secrets & Configuration
  3. Providers
  4. Login & OIDC
  5. azure-login

azure-login

    The azure-login provider enables you to log in to Azure using OpenID Connect or by providing static credentials. The provider will return a set of credentials that can be used to access Azure resources or fetch secrets using the azure-secrets provider.

    Example

    The azure-login provider’s outputs can be consumed by the Pulumi Azure providers (azure-native, azure, and azuread) and the Azure SDKs through the standard ARM_* environment variables:

    values:
  azure:
    login:
      fn::open::azure-login:
        clientId: aaaaaaaa-bbbb-cccc-dddd-eeeeeeeeeeee
        tenantId: aaaaaaaa-bbbb-cccc-dddd-eeeeeeeeeeee
        subscriptionId: /subscriptions/00000000-0000-0000-0000-000000000000
        oidc: true
  environmentVariables:
    # Consumed by the Pulumi Azure providers (azure-native, azure, azuread) and the Azure SDKs
    ARM_USE_OIDC: "true"
    ARM_CLIENT_ID: ${azure.login.clientId}
    ARM_TENANT_ID: ${azure.login.tenantId}
    ARM_SUBSCRIPTION_ID: ${azure.login.subscriptionId}
    ARM_OIDC_TOKEN: ${azure.login.oidc.token}

    The azuredevops provider accepts the same ARM_CLIENT_ID, ARM_TENANT_ID, ARM_OIDC_TOKEN, and ARM_USE_OIDC credentials. It does not use ARM_SUBSCRIPTION_ID; instead, set your organization URL with the AZDO_ORG_SERVICE_URL environment variable.

    Configuring OIDC

    To learn how to configure OpenID Connect (OIDC) between Pulumi Cloud and Azure, see the OpenID Connect integration documentation.

    Inputs

    PropertyTypeDescription
    clientIdstringThe client ID to use
    tenantIdstringThe tenant ID to use
    subscriptionIdstringThe subscription ID to use
    clientSecretstring[Optional] - The client secret to use for authentication, if any.
    oidcbool[Optional] - Whether to use OIDC to log in. Defaults to false.
    subjectAttributesstring[][Optional] - Subject attributes to be included in the OIDC token. For more information see the OpenID subject customization documentation

    Outputs

    PropertyTypeDescription
    clientIdstringThe configured client ID
    tenantIdstringThe configured tenant ID
    subscriptionIdstringThe configured subscription ID
    clientSecretstring[Optional] - The client secret used for authentication, if any.
    oidcAzureLoginOIDC[Optional] - OIDC-related data, if OIDC is used for authentication.

    AzureLoginOIDC

    PropertyTypeDescription
    tokenstringThe OIDC token to use for authentication.