teamsapp auth login azure to enable token based authentication

[xmichelleyang]

Problem/Feature- Request Summary
Microsoft is transitioning away from certificate-based authentication to enhance security and simplify management. The new security standard focuses on moving towards token-based authentication methods, such as managed identities and phishing-resistant multifactor authentication (PR-MFA). Currently as shown in the documentation for authenticating in the CI/CD pipeline, there is only Certificate and Password based authentication: https://learn.microsoft.com/en-us/microsoftteams/platform/toolkit/use-cicd-template?tabs=certificate#set-up-cicd-pipelines-with-teams-toolkit-cli

Solution I'd Like
Teamsapp auth login should enable token-based authentication to comply with recent Microsoft security standards.

Example of new authentication command
teamsapp auth login azure --managed-identity true --interactive false -verbose

Alternatives I've Considered
I've unblocked my CI/CD pipeline project by authenticating via certificate-based authentication as suggested in the above linked documentation.

[teams-toolkit-assistant]

👋 Hi @xmichelleyang,

Thank you for reporting this issue! We want to let you know that:

⏱️ Our team will personally review your issue
🎯 You can expect a response within 2 business days

✨ This is an AI-generated initial response
🤖 AI-Generated Preliminary Analysis:

It appears that you are looking for an update to the Teams Toolkit CLI to support token-based authentication methods, such as managed identities, to align with Microsoft’s recent security standards.

Currently, the Teams Toolkit CLI supports certificate-based and password-based authentication methods, as outlined in the documentation you linked: Set up CI/CD pipelines with Teams Toolkit CLI.

Proposed Solution

To address your request, it would be ideal for the Teams Toolkit CLI to support token-based authentication, particularly through managed identities, which are highly secure and streamline the authentication process. An example command could be:

teamsapp auth login azure --managed-identity true --interactive false -verbose

Current Workaround

Until this feature is implemented, you can continue using the certificate-based authentication method. Here's a brief overview of how to set up certificate-based authentication for your CI/CD pipeline:

1. Generate and Configure Certificates:
   Follow the steps in the documentation to generate a certificate and configure it in your Azure AD app registration.

2. Authenticate Using Certificate:
   Use the following command to authenticate using the certificate in your CI/CD pipeline:

   teamsapp auth login azure --interactive false --service-principal -u $AZURE_ORG_APP_ID -p $AZURE_CERTIFICATE_PATH --tenant $AZURE_ORG_TENANT_ID

Recommendation for Feature Request

To formally request this feature, you can create an issue on the Teams Toolkit GitHub repository. This will bring your request to the attention of the development team. Here is how you can do it:

1. Go to the Teams Toolkit GitHub Issues page.
2. Click on the "New issue" button.
3. Provide a detailed description of your feature request, including the benefits of supporting token-based authentication and how it aligns with Microsoft's security standards.

Additional Resources

• Managed identities for Azure resources
• Phishing-resistant multifactor authentication (PR-MFA)

By following these steps and providing detailed feedback to the development team, you can help advocate for the inclusion of token-based authentication in the Teams Toolkit CLI.

---

Note: This is an automated first response generated by AI. A human team member will review your issue and provide a more detailed response soon. We appreciate your patience!

[sayali-MSFT]

Thank you for your suggestion! To better achieve your requirements, we recommend submitting this feature request through the Teams Feedback Portal. This is the best way to ensure your idea is considered for future updates.

We appreciate your input and encourage you to share any additional thoughts!

[summzhan]

@xmichelleyang , Thank you very much for suggestions! Teams Toolkit team has well received your feedback, and has created feature ideas in our backlog. We will have more internal discussions on the right priorities for implementing this. I will keep you posted once we have more detailed plan!