Azure OauthAccessToken
CertifiedRequest Azure AD access token
Azure OauthAccessToken
Request Azure AD access token
Fetches an access token using the configured tenant/client credentials. Defaults scopes to https://management.azure.com/.default and returns the token encrypted in outputs.
type: io.kestra.plugin.azure.auth.OauthAccessTokenExamples
id: azure_get_token
namespace: company.team
tasks:
- id: get_access_token
type: io.kestra.plugin.azure.auth.OauthAccessToken
tenantId: "{{ secret('SERVICE_PRINCIPAL_TENANT_ID') }}"
clientId: "{{ secret('SERVICE_PRINCIPAL_CLIENT_ID') }}"
clientSecret: "{{ secret('SERVICE_PRINCIPAL_CLIENT_SECRET') }}"
Properties
tenantId *string
Azure AD tenant ID (GUID)
assets
Assets this task consumes as inputs or produces as outputs, for lineage tracking and the asset graph (Enterprise Edition). A flow declaring this property on a task is rejected in the open-source edition.
io.kestra.core.models.assets.AssetsDeclaration
IGNOREFAILWARNAsset failure behavior
Behavior applied to the task state when a declared asset fails to render, emit, or be persisted (e.g. a lock conflict): FAIL escalates it to FAILED, WARN (default) warns it if it would otherwise succeed, IGNORE leaves the state untouched.
Whether to auto-register assets referenced dynamically at runtime that are not statically declared in inputs or outputs.
The assets consumed as inputs.
io.kestra.core.models.assets.AssetIdentifier
1The assets produced as outputs.
io.kestra.plugin.ee.assets.Dataset
1150{}1150io.kestra.plugin.ee.assets.File
1150{}1150io.kestra.plugin.ee.assets.Table
1150{}1150io.kestra.plugin.ee.assets.VM
1150{}1150io.kestra.core.models.assets.External
1150{}1150io.kestra.core.models.assets.Custom
11501Custom asset type
{}1150clientId string
Client ID of the Azure AD application
Application (client) ID used for service principal authentication.
clientSecret string
Client secret for the Azure AD application
Secret value associated with the client ID; store in a Kestra secret.
pemCertificate string
PEM-encoded certificate content for client authentication
PEM text for certificate-based auth; alternative to clientSecret.
scopes array
["https://management.azure.com/.default"]OAuth scopes
Space-separated scopes sent to Azure AD; defaults to https://management.azure.com/.default
Outputs
accessToken *
OAuth access token payload
io.kestra.plugin.azure.auth.OauthAccessToken-AccessTokenOutput
date-timeOAuth access token value
Will be automatically encrypted and decrypted in the outputs if encryption is configured
