Hello @HASLEHNER, MYLENE

Thanks for reaching out to us.

The error message you received indicates that the Azure ML SDK was unable to retrieve a token from the included credentials. This can happen if the credentials you are using are invalid or if there is an issue with the authentication process.

To resolve this issue, you can try the following steps**:**

Check that you have the correct credentials for your Azure account. You can do this by logging into the Azure portal and checking the credentials for your account.

If you are using a service principal for authentication, make sure that the service principal has the correct permissions to access the resources you are trying to use.

Check that your environment variables are set correctly. You can set environment variables in the notebook by using the os module. For example, to set the AZURE_CLIENT_ID environment variable, you can use the following command:

import os
os.environ['AZURE_CLIENT_ID'] = ''

Replace with the actual client ID for your Azure account.

If you continue to experience issues, you may want to try using a different authentication method, such as interactive authentication or managed identity.

It's difficult to say exactly which commands in the notebook need to be written to avoid this error without seeing the notebook itself. However, you can try setting the environment variables as described above and see if that resolves the issue.

Let me know how it works. I am happy to help you further.

Regards,

Yutong

-Please kindly accept the answer and vote 'Yes' if you feel helpful to support the community, thanks a lot.

This error can also occur if Visual Studio loses it's Azure Service Authentication connection for some reason or your actual AD credentials have changed (for example a password change).

In this case, simply signing in again has fixed this for me:

In Visual Studio, go to Tools > Options. Expand "Azure Service Authentication" > "Account Selection." If you see a "Reenter your credentials" link, click it and sign in again. If not, try a regular sign-out + sign-in via your Visual Studio profile in the top right.

Hello Diksha Singh

I believe you are using Managed Identity Authentication DefaultAzureCredential and ManagedIdentityCredential support managed identity authentication in any hosting environment which supports managed identities, such as (this list is not exhaustive):

• Azure Virtual Machines
• Azure App Service
• Azure Kubernetes Service
• Azure Cloud Shell
• Azure Arc
• Azure Service Fabric

DefaultAzureCredential and EnvironmentCredential can be configured with environment variables. Each type of authentication requires values for specific variables:

Managed Identity flow

from azure.identity import ManagedIdentityCredential

credential = ManagedIdentityCredential()

# Can also specify a client ID of a user-assigned managed identity
credential = ManagedIdentityCredential(
    client_id="",
)

https://azuresdkdocs.blob.core.windows.net/$web/python/azure-identity/1.6.0/index.html

Refer this SO answer by Dasari Kamali. For retrieving secret value in Azure Function via Visual Studio.

I agree with Gaurav Mantri try implementing : var credential = new DefaultAzureCredential(); in your code:-

My user who is logged in to Visual Studio with PowerShell terminal and Profile having Key vault administrator role assigned at the Key vault level like below: -

I have enabled RBAC based access for Key vault, You can enable Access policy-based authorization and assign correct keyvault role to the user.

My Function1.cs code:-

using System;
using Azure.Identity;
using Azure.Security.KeyVault.Secrets;
using Azure.Core;
using Microsoft.AspNetCore.Http;
using Microsoft.AspNetCore.Mvc;
using Microsoft.Azure.WebJobs;
using Microsoft.Azure.WebJobs.Extensions.Http;
using Azure;
using System.Threading.Tasks;

public static class KeyVaultFunction
{
    [FunctionName("GetKeyVaultValue")]
    public static async Task<IActionResult> GetKeyVaultValue(
        [HttpTrigger(AuthorizationLevel.Function, "get", Route = null)] HttpRequest req)
    {
        try
        {
            string keyVaultName = Environment.GetEnvironmentVariable("keyVaultName");
            var kvUri = "https://valeeykeyvlt.vault.azure.net/";

            var client = new SecretClient(new Uri(kvUri), new DefaultAzureCredential());
            var secretName = "secret1";
            var secret = await client.GetSecretAsync(secretName);

            string keyVaultValue = secret.Value.Value;
            return new OkObjectResult(keyVaultValue);
        }
        catch (RequestFailedException ex)
        {
            return new StatusCodeResult((int)ex.Status);
        }
        catch (Exception ex)
        {
            return new StatusCodeResult(500);
        }
    }
}

Output:-

Visual Studio settings:-

az login
az account set --subscription "xxxxxxxx"