Azure OauthAccessToken

Azure OauthAccessToken

Certified

Request Azure AD access token

Fetches an access token using the configured tenant/client credentials. Defaults scopes to https://management.azure.com/.default and returns the token encrypted in outputs.

yaml
type: io.kestra.plugin.azure.auth.OauthAccessToken
yaml
id: azure_get_token
namespace: company.team

tasks:
  - id: get_access_token
    type: io.kestra.plugin.azure.oauth.OauthAccessToken
    tenantId: "{{ secret('SERVICE_PRINCIPAL_TENANT_ID') }}"
    clientId: "{{ secret('SERVICE_PRINCIPAL_CLIENT_ID') }}"
    clientSecret: "{{ secret('SERVICE_PRINCIPAL_CLIENT_SECRET') }}"
Properties

Azure AD tenant ID (GUID)

Client ID of the Azure AD application

Application (client) ID used for service principal authentication.

Client secret for the Azure AD application

Secret value associated with the client ID; store in a Kestra secret.

PEM-encoded certificate content for client authentication

PEM text for certificate-based auth; alternative to clientSecret.

Reference (ref) of the pluginDefaults to apply to this task.

SubTypestring
Default["https://management.azure.com/.default"]

OAuth scopes

Space-separated scopes sent to Azure AD; defaults to https://management.azure.com/.default

OAuth access token payload

Definitions
expirationTimestring
Formatdate-time
scopesarray
SubTypestring
tokenValuestring

OAuth access token value

Will be automatically encrypted and decrypted in the outputs if encryption is configured