Authentication in Azure Devops

Hi,

I want to use SDK inside a pipeline task. But I get token in another task as follow:

$token= $( az account get-access-token --resource=https://management.azure.com --query accessToken) Write-Host("##vso[task.setvariable variable=api-token;issecret=true]$token")

Is there anyway to use this token with SDK? Because I get token with service connection and I don’t store client and tenant info in environment variables.

Any advice would be appreciated.

Best

[anotherancientalien]

@mccoyp A million thanks!

[mccoyp]

Hi @anotherancientalien, thank you for opening an issue and providing additional information! If you’d like to use the access token directly and don’t need/want a credential to automatically refresh it, this sample from azure-identity should be what you’re looking for. After declaring a StaticTokenCredential type like the sample shows, you can do something like the following:

credential = StaticTokenCredential(token)  # token is the access token acquired from the Azure CLI
backup_client = RecoveryServicesBackupClient(credential, subscription_id)

Note that you will still have to provide the subscription ID and that the credential won’t be usable after the access token expires.