Microsoft Entra authentication

[williamspindox]

trafficstars

Please add Microsoft Entra authentication for Azure: https://learn.microsoft.com/en-us/azure/ai-services/openai/reference#authentication

[markpollack]

Thanks, we will look into this.

[williamspindox]

I'm trying something like this on org.springframework.ai.autoconfigure.azure.openai.AzureOpenAiAutoConfiguration:

AzureProfile azureProfile = new AzureProfile(AzureEnvironment.AZURE); TokenCredential tokenCredential = new ClientSecretCredentialBuilder() .clientId("xxxxxxxxxxxxxxxxx") .clientSecret("xxxxxxxxxxxxxxxxx") .tenantId("xxxxxxxxxxxxxxxxx") .authorityHost(azureProfile.getEnvironment().getActiveDirectoryEndpoint()) .build(); return new OpenAIClientBuilder().endpoint(connectionProperties.getEndpoint()) .credential(tokenCredential) .buildClient();

It works, I get:

Azure Identity => getToken() result for scopes [https://cognitiveservices.azure.com/.default]: SUCCESS {"az.sdk.message":"Acquired a new access token."}

[williamspindox]

When will it be available on your release? Thank you

[markpollack]

also see https://github.com/spring-projects/spring-ai/issues/309

[williamspindox]

https://github.com/spring-projects/spring-ai/pull/448

[markpollack]

I will ask someone from microsoft to review this, I am not able to easily evaluate what is going on here. Sorry it is taking a while.

[williamspindox]

No problem. I've already tested my PR with the Entra authentication on Azure and it works great, but welcome a check by someone from Microsoft. Regards.