
Azure OauthAccessToken
CertifiedRequest Azure AD access token
Azure OauthAccessToken
Request Azure AD access token
Fetches an access token using the configured tenant/client credentials. Defaults scopes to https://management.azure.com/.default and returns the token encrypted in outputs.
type: io.kestra.plugin.azure.auth.OauthAccessTokenExamples
id: azure_get_token
namespace: company.team
tasks:
- id: get_access_token
type: io.kestra.plugin.azure.oauth.OauthAccessToken
tenantId: "{{ secret('SERVICE_PRINCIPAL_TENANT_ID') }}"
clientId: "{{ secret('SERVICE_PRINCIPAL_CLIENT_ID') }}"
clientSecret: "{{ secret('SERVICE_PRINCIPAL_CLIENT_SECRET') }}"
Properties
tenantId *Requiredstring
Azure AD tenant ID (GUID)
clientId string
Client ID of the Azure AD application
Application (client) ID used for service principal authentication.
clientSecret string
Client secret for the Azure AD application
Secret value associated with the client ID; store in a Kestra secret.
pemCertificate string
PEM-encoded certificate content for client authentication
PEM text for certificate-based auth; alternative to clientSecret.
pluginDefaultsRef Non-dynamicstring
Reference (ref) of the pluginDefaults to apply to this task.
scopes array
["https://management.azure.com/.default"]OAuth scopes
Space-separated scopes sent to Azure AD; defaults to https://management.azure.com/.default
Outputs
accessToken *Required
OAuth access token payload
io.kestra.plugin.azure.auth.OauthAccessToken-AccessTokenOutput
date-timeOAuth access token value
Will be automatically encrypted and decrypted in the outputs if encryption is configured