Enable Azure OpenAI authentication using Microsoft Entra ID Client Credentials Flow, allowing Deployment Genie to securely obtain and refresh JWT access tokens through a service principal instead of relying on static API keys.

a { text-decoration: none; color: #464feb; } tr th, tr td { border: 1px solid #e6e6e6; } tr th { background-color: #f5f5f5; }

Currently, Deployment Genie supports integration with Azure OpenAI; however, many enterprise organizations have security requirements that prohibit the use of long-lived API keys for production workloads. To align with modern enterprise security standards, Deployment Genie should support Microsoft Entra ID (Azure AD) OAuth 2.0 Client Credentials Flow for authentication to Azure OpenAI.

This enhancement would allow administrators to configure a Service Principal using Tenant ID, Client ID, and either a Client Secret or Certificate. Deployment Genie would then automatically obtain and refresh JWT access tokens when communicating with Azure OpenAI, eliminating the need for static API keys.

Expected Benefits

• Improves security by eliminating reliance on long-lived API keys.
• Aligns with enterprise authentication and authorization standards.
• Supports organizations with strict compliance, governance, and audit requirements.
• Simplifies credential rotation and lifecycle management.
• Enables integration with existing Entra ID security controls and monitoring.
• Supports least-privilege access through role-based access control (RBAC).
• Provides a cloud-native authentication model consistent with Microsoft best practices.

Desired Capabilities

• Support for OAuth 2.0 Client Credentials Flow.
• Configuration of Tenant ID, Client ID, and Client Secret.
• Optional support for certificate-based authentication.
• Automatic JWT token acquisition and refresh.
• Secure storage of authentication credentials.
• Clear validation and testing capabilities within the AI configuration settings.
• Future support for Managed Identities and Workload Identity Federation where applicable.

Business Justification

Many large enterprises are standardizing on Microsoft Entra ID-based authentication for Azure services and do not permit the use of static API keys in production environments. Adding client credentials authentication would enable broader adoption of Deployment Genie for Azure OpenAI integrations while meeting enterprise security and compliance requirements