Amanda Tarafa Mas

> 1) Is this the best way to achieve this? We don't support this type of credential out of the box, no. So any solution will require some work on...

Yes, the constructor of course, and `WithoutImpersonationConfigurationImpl` as well, it's absract after all. I might make some changes to this last one so that it's more explicit on what implementers...

@gunndabad I have a question for you. The token from [here](https://techcommunity.microsoft.com/t5/azure-developer-community-blog/lab-guide-aks-workload-identity/ba-p/3728630) that you send to the STS endpoint, i.e. the subject token, is it the `AccessToken` obtained via either `GetTokenAsync`...

@gunndabad I've been talking to folks in the Identity team about this and they suggested you follow instructions to [Configure workload identity federation in AKS](https://cloud.google.com/iam/docs/workload-identity-federation-with-kubernetes#aks), in particular, that you enable...

OK, just to report back to the Indentity team, when you say you couldn't get file-sourced credentials to work, what was the problem? - Was the credential not being found...

Thanks for the info. With this, I can look into a few things: - If the subject token request is failing, why do we attempt to parse the response as...

OK, I'll get back with this info to the Identity team, just to at least clarify what they meant. It's likely then that this will fall into the "let's open...

We'll look into this, it's certainly a reasonable request. We'll update here when we know more.

Per call credential is not currently supported for batch (by the library) as far as I can see. I'll take a closer look tomorrow and confirm. I'll also confirm what...

We crossed comments. It can be implemented either way, as individual batched requests may have their own credential. But possibly implementing at the `BatchRequest` level and maybe failing if the...