This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(230.39999999999998, 67%, 32%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAL%3C/text%3E%3C/svg%3E)
Use case:
Environment:
When invoking the API, I got the exception "Azure.Identity.AuthenticationFailedException: ManagedIdentityCredential authentication failed: Service request failed."
Also, tested with System assigned identity with storage blob contributor role, it works.
Thanks.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(25.6, 0%, 12%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESW%3C/text%3E%3C/svg%3E)
Hi @Andy Lang , I understand that you're using user-assigned managed identity for an App Service to access Storage Blob but the request failed. Same setup with system-assigned managed identity works.
Please note that your code to use user-assigned managed identity is different from using system-assigned managed identity. For example using python:
Authenticate using user-assigned managed identity by specifying ClientID
from azure.identity import ManagedIdentityCredential from azure.keyvault.secrets import SecretClient
credential = ManagedIdentityCredential(client_id="managed_identity_client_id")
client = SecretClient("https://my-vault.vault.azure.net", credential)
Authenticate using system-assigned managed identity
from azure.identity import ManagedIdentityCredential from azure.keyvault.secrets import SecretClient
credential = ManagedIdentityCredential()
client = SecretClient("https://my-vault.vault.azure.net", credential)
Please check that your code has used the appropriate ClientID, ResourceID, or ObjectID for user-assigned managed identity.
Thanks for your response, I tried this way by specifying the client id, I got a different exception 403.
Is there any special settings in our PME environment?
Did you try with ResourceID or ObjectID?
@Silvia Wibowo I tried both client id and object id.
Hi @Andy Lang , are you sure you're using the correct ClientID? What's the exact error message? Was it the same error message you got with ClientID and ObjectID?
Please check from "Settings > Properties" page of the user-assigned managed identity. "Client Id" is clearly mentioned there, while ObjectID is marked as "Principal Id". Try also with ResourceID - this value is marked as "Id".
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(227.2, 60%, 32%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EHV%3C/text%3E%3C/svg%3E)
Andy Lang Just checking in to see if the response was helpful. If it answered your question, please consider clicking "Accept the answer" as it may help other community members as well. Let us know if you have any further questions.
Andy Lang If this answer was helpful and pointed you in the right direction, please consider clicking "Accept Answer"—it may benefit other community members reading this thread. If you have any further questions, feel free to let us know!
@Harshitha Veeramalla thanks for the answer.
Yes, it works. I think there was some caching, so at the beginning it did not work.