What is Azure Identity Rust?

Azure Identity Rust is a free, open-source AI agent skill. |

How do I install Azure Identity Rust?

Install Azure Identity Rust with a single command: npx mdskills install sickn33/azure-identity-rust. This downloads the skill files into your project and your AI agent picks them up automatically.

What platforms support Azure Identity Rust?

Azure Identity Rust works with Claude Code, Claude Desktop, Cursor, Vscode Copilot, Windsurf, Continue Dev, Codex, Gemini Cli, Amp, Roo Code, Goose, Opencode, Trae, Qodo, Command Code. Skills use the open SKILL.md format which is compatible with any AI coding agent that reads markdown instructions.

Azure Identity SDK for Rust

Name: Azure Identity Rust: AI Agent Skill
Rating: 5 (1 reviews)
Author: sickn33

Authentication library for Azure SDK clients using Microsoft Entra ID (formerly Azure AD).

Installation

cargo add azure_identity

Environment Variables

# Service Principal (for production/CI)
AZURE_TENANT_ID=
AZURE_CLIENT_ID=
AZURE_CLIENT_SECRET=

# User-assigned Managed Identity (optional)
AZURE_CLIENT_ID=

DeveloperToolsCredential

The recommended credential for local development. Tries developer tools in order (Azure CLI, Azure Developer CLI):

use azure_identity::DeveloperToolsCredential;
use azure_security_keyvault_secrets::SecretClient;

let credential = DeveloperToolsCredential::new(None)?;
let client = SecretClient::new(
    "https://my-vault.vault.azure.net/",
    credential.clone(),
    None,
)?;

Credential Chain Order

Order	Credential	Environment
1	AzureCliCredential	`az login`
2	AzureDeveloperCliCredential	`azd auth login`

Credential Types

Credential	Usage
`DeveloperToolsCredential`	Local development - tries CLI tools
`ManagedIdentityCredential`	Azure VMs, App Service, Functions, AKS
`WorkloadIdentityCredential`	Kubernetes workload identity
`ClientSecretCredential`	Service principal with secret
`ClientCertificateCredential`	Service principal with certificate
`AzureCliCredential`	Direct Azure CLI auth
`AzureDeveloperCliCredential`	Direct azd CLI auth
`AzurePipelinesCredential`	Azure Pipelines service connection
`ClientAssertionCredential`	Custom assertions (federated identity)

ManagedIdentityCredential

For Azure-hosted resources:

use azure_identity::ManagedIdentityCredential;

// System-assigned managed identity
let credential = ManagedIdentityCredential::new(None)?;

// User-assigned managed identity
let options = ManagedIdentityCredentialOptions {
    client_id: Some("".into()),
    ..Default::default()
};
let credential = ManagedIdentityCredential::new(Some(options))?;

ClientSecretCredential

For service principal with secret:

use azure_identity::ClientSecretCredential;

let credential = ClientSecretCredential::new(
    "".into(),
    "".into(),
    "".into(),
    None,
)?;

Best Practices

Use DeveloperToolsCredential for local dev — automatically picks up Azure CLI
Use ManagedIdentityCredential in production — no secrets to manage
Clone credentials — credentials are Arc-wrapped and cheap to clone
Reuse credential instances — same credential can be used with multiple clients
Use tokio feature — cargo add azure_identity --features tokio

Reference Links

Resource	Link
API Reference	https://docs.rs/azure_identity
Source Code	https://github.com/Azure/azure-sdk-for-rust/tree/main/sdk/identity/azure_identity
crates.io	https://crates.io/crates/azure_identity

Azure Identity Rust