[Identity] Fix kwarg default in DefaultAzureCredential

pvaneck · pvaneck · commit db832f9dc6ee · 2026-04-02T01:53:36.000Z
The behavior of `workload_identity_credential_id` should match what is
currently documented.

Signed-off-by: Paul Van Eck &lt;paulvaneck@microsoft.com&gt;
diff --git a/sdk/identity/azure-identity/CHANGELOG.md b/sdk/identity/azure-identity/CHANGELOG.md
@@ -8,6 +8,8 @@
 
 ### Bugs Fixed
 
+- `DefaultAzureCredential`'s `workload_identity_client_id` keyword argument no longer inherits the value of `managed_identity_client_id`. It now independently defaults to the `AZURE_CLIENT_ID` environment variable, matching the documented behavior. ([#46073](https://github.com/Azure/azure-sdk-for-python/pull/46073))
+
 ### Other Changes
 
 ## 1.25.3 (2026-03-12)
diff --git a/sdk/identity/azure-identity/azure/identity/_credentials/default.py b/sdk/identity/azure-identity/azure/identity/_credentials/default.py
@@ -157,7 +157,9 @@ def __init__(self, **kwargs: Any) -> None:  # pylint: disable=too-many-statement
         managed_identity_client_id = kwargs.pop(
             "managed_identity_client_id", os.environ.get(EnvironmentVariables.AZURE_CLIENT_ID)
         )
-        workload_identity_client_id = kwargs.pop("workload_identity_client_id", managed_identity_client_id)
+        workload_identity_client_id = kwargs.pop(
+            "workload_identity_client_id", os.environ.get(EnvironmentVariables.AZURE_CLIENT_ID)
+        )
         workload_identity_tenant_id = kwargs.pop(
             "workload_identity_tenant_id", os.environ.get(EnvironmentVariables.AZURE_TENANT_ID)
         )
diff --git a/sdk/identity/azure-identity/azure/identity/aio/_credentials/default.py b/sdk/identity/azure-identity/azure/identity/aio/_credentials/default.py
@@ -140,7 +140,9 @@ def __init__(self, **kwargs: Any) -> None:  # pylint: disable=too-many-statement
         managed_identity_client_id = kwargs.pop(
             "managed_identity_client_id", os.environ.get(EnvironmentVariables.AZURE_CLIENT_ID)
         )
-        workload_identity_client_id = kwargs.pop("workload_identity_client_id", managed_identity_client_id)
+        workload_identity_client_id = kwargs.pop(
+            "workload_identity_client_id", os.environ.get(EnvironmentVariables.AZURE_CLIENT_ID)
+        )
         workload_identity_tenant_id = kwargs.pop(
             "workload_identity_tenant_id", os.environ.get(EnvironmentVariables.AZURE_TENANT_ID)
         )

Original file line number	Diff line number	Diff line change
`@@ -157,7 +157,9 @@ def __init__(self, **kwargs: Any) -> None: # pylint: disable=too-many-statement`
`157`	`157`	`managed_identity_client_id = kwargs.pop(`
`158`	`158`	`"managed_identity_client_id", os.environ.get(EnvironmentVariables.AZURE_CLIENT_ID)`
`159`	`159`	`)`
`160`		`- workload_identity_client_id = kwargs.pop("workload_identity_client_id", managed_identity_client_id)`
	`160`	`+ workload_identity_client_id = kwargs.pop(`
	`161`	`+ "workload_identity_client_id", os.environ.get(EnvironmentVariables.AZURE_CLIENT_ID)`
	`162`	`+ )`
`161`	`163`	`workload_identity_tenant_id = kwargs.pop(`
`162`	`164`	`"workload_identity_tenant_id", os.environ.get(EnvironmentVariables.AZURE_TENANT_ID)`
`163`	`165`	`)`
Original file line number	Diff line number	Diff line change
`@@ -140,7 +140,9 @@ def __init__(self, **kwargs: Any) -> None: # pylint: disable=too-many-statement`
`140`	`140`	`managed_identity_client_id = kwargs.pop(`
`141`	`141`	`"managed_identity_client_id", os.environ.get(EnvironmentVariables.AZURE_CLIENT_ID)`
`142`	`142`	`)`
`143`		`- workload_identity_client_id = kwargs.pop("workload_identity_client_id", managed_identity_client_id)`
	`143`	`+ workload_identity_client_id = kwargs.pop(`
	`144`	`+ "workload_identity_client_id", os.environ.get(EnvironmentVariables.AZURE_CLIENT_ID)`
	`145`	`+ )`
`144`	`146`	`workload_identity_tenant_id = kwargs.pop(`
`145`	`147`	`"workload_identity_tenant_id", os.environ.get(EnvironmentVariables.AZURE_TENANT_ID)`
`146`	`148`	`)`