apache / apache/opendal

new feature: Entra ID authentication for Azure Blob Storage

Open
#5,126 5 comments 4 reactions 0 assignees View on GitHub
enhancement
Dominant language
Rust
Stars
5.4k
Forks
825
Avg merge
1d 14m
Merged PRs (30d)
127

Description

### Feature Description

It would be great if we can authenticate with Azure Blob Storage using Entra ID authentication instead of account keys.

This means using either service principal secret, or the Azure CLI credentials.

### Problem and Solution

Using account keys is problematic because every time a person from the team offboards, I need to rotate the keys. Using Entra ID authentication eliminates this problem.

### Additional Context

_No response_

### Are you willing to contribute to the development of this feature?

- [ ] Yes, I am willing to contribute to the development of this feature.

Contributor guide

Open the contributing guide

Research direction

The payload names no files or tests. Start by locating OpenDAL’s Azure Blob Storage backend and its current account-key authentication path, then read the Azure Entra ID credential flows for service principals and Azure CLI. Done means Blob Storage supports both requested Entra ID authentication methods with coverage for each path.

Written by the indexing model from the issue text.

Assessment

Tech stack
azure, rust
Domain
authentication, cloud
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
42/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.