Is there a chance to support managed identity in the iot-sdk APIs?

[ranjith-t]

In the aure-iot-sdk-java apart from TokenCredential and AzureSasCredential, I could not see API support with managed identity for secure connection. Is there a plan to include them in the future?

[timtay-microsoft]

Currently, we support managed identity credentials for authentication in the IoT hub service client as seen in this sample code. The TokenCredential class allows you to pass in a number of implementations from the Azure Identity package. For more examples of this, see here.

We don't have any plans to add similar managed identity support on the IoT hub device client because the service itself does not support that kind of authentication yet.

Hope that helps!
-Tim

[ranjith-t]

@timtay-microsoft , thank you for the references. we are able to do service app registration and token based auth for services(client app). As far as I understand, these tokens has expiry, can you please guide what is the best practice for renewal, if this is on-demand or time based?

[timtay-microsoft]

In general, the renewal is taken care of for you by the Azure Identity package itself. Whether a given type of authentication (interactive login vs hardcoded tenantId + clientId + client secret) has a strict time limit would be a better question for the folks maintaining that library.