Azure Identity Broker Account Type

Azure Identity Broker offers several account types for users looking to authenticate and manage their Azure resources. The primary account types include:

• Interactive Browser Credential: This account type allows users to authenticate interactively through a web browser, which is suitable for applications requiring user credentials.
• Interactive Browser Broker Credential: This option utilizes the Windows Authentication Broker (WAM) for a smoother authentication experience, enabling silent sign-ins with the default system account.
• Default Account Authentication: For users who consistently sign in with the same Windows account, this option allows for automatic sign-in without the need to select an account each time.

To utilize these account types, users must ensure they are using the appropriate version of the Azure Identity Broker package, specifically version 1.1.0 or higher.

Azure Identity Broker Account Opening Process

Opening an account with Azure Identity Broker involves the following steps:

• Prerequisites: Ensure you have the Azure Identity Broker library installed. For .NET, use the command:

dotnet add package azure.identity.broker --version 1.1.0

• Register Your Application: Navigate to the Azure portal and register your application under Microsoft Entra ID.

• Set Up Redirect URIs: Add the WAM redirect URI in your app registration:

ms-appx-web://microsoft.aad.broker.plugin/{client_id}

• Configure Authentication Settings: Under the app registration, enable public client flows to allow interactive logins.

• Choose Account Type: Decide whether to use the Interactive Browser Credential or the Interactive Browser Broker Credential based on your application's needs.

• Implement Authentication Code: Use the appropriate code to implement authentication in your application. For example, to authenticate using the Interactive Browser Broker Credential:

import win32gui

from azure.identity.broker import InteractiveBrowserBrokerCredential

window_handle = win32gui.get_foreground_window()

credential = InteractiveBrowserBrokerCredential(parent_window_handle=window_handle, use_default_broker_account=True)

• Testing and Validation: Test the authentication flow to ensure it works as expected, handling any exceptions as needed.

By following these steps, users can effectively set up their Azure Identity Broker accounts and utilize the authentication features provided.