Can't upload to a blob from a local dev Maui client, tried VS account, service principal, system environment variables, etc.

Question

Can't upload to a blob from a local dev Maui client, tried VS account, service principal, system environment variables, etc.

Mike Spain 35

I'm trying to use DefaultAzureCredential. I installed Azure CLI successfully (I believe) and used it to create a service principal with a Storage Blob Data Contributor role. I also had tried to use my VS account and I had set up my system environment variables. None of these seem to work.

I keep getting this error:

DefaultAzureCredential failed to retrieve a token from the included credentials. See the troubleshooting guide for more information. https://aka.ms/azsdk/net/identity/defaultazurecredential/troubleshoot
EnvironmentCredential authentication unavailable. Environment variables are not fully configured. See the troubleshooting guide for more information. https://aka.ms/azsdk/net/identity/environmentcredential/troubleshoot
WorkloadIdentityCredential authentication unavailable. The workload options are not fully configured. See the troubleshooting guide for more information. https://aka.ms/azsdk/net/identity/workloadidentitycredential/troubleshoot
ManagedIdentityCredential authentication unavailable. No response received from the managed identity endpoint.
Visual Studio Token provider can't be accessed at /data/user/0/witnessed.app/files/.IdentityService/AzureServiceAuth/tokenprovider.json
Azure CLI not installed
PowerShell is not installed.
Azure Developer CLI could not be found.

Keshavulu Dasari 4,665 Reputation points Microsoft External Staff

2025-04-15T19:39:02.3633333+00:00

Hi Mike Spain ,

Based on the above exception, it doesn't seem to be coming out of storage.

Usually if a call fails after reaching storage, there is more meaningful exception along with a failed storage request ID (Typically ending with 6 0's)

I would recommend monitoring diagnostic logs which shall provide insights if the calls are even reaching storage in the first place or not and if you see any storage side failures.

azure-sdk-for-net/sdk/identity/Azure.Identity/TROUBLESHOOTING.md at main · Azure/azure-sdk-for-net · GitHub

Hope it helps!

Please do consider to “up-vote” wherever the information provided helps you, this can be beneficial to other community members.
Mike Spain 35 Reputation points

2025-04-15T20:04:01.57+00:00

Thanks for the comment.

I had trouble finding the appropriate tag for this question, honestly. I looked for Azure.Identity or something like that. I feel that you're correct that this is probably not a Blob issue. It doesn't seem to even get to the Blob container having failed many authentication/authorization checks before that.

I really thought I had it once I figured out how to add a service principal and seemingly give it the correct permission to the blob. It seems to generate tokens properly through the Azure CLI.

How do I view the diagnostics? I have diagnostics enabled as a DefaultAzureCredentialOption but I am not sure where that ends up/how that helps.
Venkatesan S 1,625 Reputation points Microsoft External Staff

2025-04-16T14:45:38.1733333+00:00

Hi Mike Spain

Could you please add your code and specify how you need to authenticate with the Storage account?
Mike Spain 35 Reputation points

2025-04-18T03:15:06.55+00:00

Thank you both for your attention to my question.

I have determined that what I was attempting to do is not possible. The method of authentication that I was really focused on getting working was with AzureCliCredential and setting up Azure CLI properly on my local dev machine. As I said, I believe I had that set up correctly both locally and had things properly set up in my Azure portal--and I was correct in that assumption.

The reason it wasn't working, however, is because I was trying to do this authentication directly from .NET Maui code that was running from an Android emulator. As soon as I switched it to Windows, it worked. I guess it makes sense to me (now) that it wouldn't work from the original setup, but I hadn't seen that in any documentation anywhere.

Again, thanks. I can adjust my architecture a bit to account for this.
Mike Spain 35 Reputation points

2025-04-18T03:18:00.1066667+00:00

AzureCliCredential and Azure CLI authentication is not possible from .NET Maui code running from an Android emulator.
Keshavulu Dasari 4,665 Reputation points Microsoft External Staff

2025-04-18T18:50:24.1733333+00:00

Hi Mike Spain ,

Good to see that you were able to identify the root cause of the issue! It makes sense that the Azure CLI authentication wouldn't work directly from an Android emulator, as the CLI is typically designed to run in a desktop environment.

Please do not forget to "Accept the answer” and “up-vote” wherever the information provided helps you, this can be beneficial to other community members.

If you have any other questions or are still running into more issues, let me know in the "comments" and I would be glad to assist you.

Accepted answer

0 additional answers

Your answer

Keshavulu Dasari 4,665 Reputation points Microsoft External Staff

2025-04-15T19:39:02.3633333+00:00

Hi Mike Spain ,

Based on the above exception, it doesn't seem to be coming out of storage.

Usually if a call fails after reaching storage, there is more meaningful exception along with a failed storage request ID (Typically ending with 6 0's)

I would recommend monitoring diagnostic logs which shall provide insights if the calls are even reaching storage in the first place or not and if you see any storage side failures.

azure-sdk-for-net/sdk/identity/Azure.Identity/TROUBLESHOOTING.md at main · Azure/azure-sdk-for-net · GitHub

Hope it helps!

Please do consider to “up-vote” wherever the information provided helps you, this can be beneficial to other community members.
Mike Spain 35 Reputation points

2025-04-15T20:04:01.57+00:00

Thanks for the comment.

I had trouble finding the appropriate tag for this question, honestly. I looked for Azure.Identity or something like that. I feel that you're correct that this is probably not a Blob issue. It doesn't seem to even get to the Blob container having failed many authentication/authorization checks before that.

I really thought I had it once I figured out how to add a service principal and seemingly give it the correct permission to the blob. It seems to generate tokens properly through the Azure CLI.

How do I view the diagnostics? I have diagnostics enabled as a DefaultAzureCredentialOption but I am not sure where that ends up/how that helps.
Venkatesan S 1,625 Reputation points Microsoft External Staff

2025-04-16T14:45:38.1733333+00:00

Hi Mike Spain

Could you please add your code and specify how you need to authenticate with the Storage account?
Mike Spain 35 Reputation points

2025-04-18T03:15:06.55+00:00

Thank you both for your attention to my question.

I have determined that what I was attempting to do is not possible. The method of authentication that I was really focused on getting working was with AzureCliCredential and setting up Azure CLI properly on my local dev machine. As I said, I believe I had that set up correctly both locally and had things properly set up in my Azure portal--and I was correct in that assumption.

The reason it wasn't working, however, is because I was trying to do this authentication directly from .NET Maui code that was running from an Android emulator. As soon as I switched it to Windows, it worked. I guess it makes sense to me (now) that it wouldn't work from the original setup, but I hadn't seen that in any documentation anywhere.

Again, thanks. I can adjust my architecture a bit to account for this.
Mike Spain 35 Reputation points

2025-04-18T03:18:00.1066667+00:00

AzureCliCredential and Azure CLI authentication is not possible from .NET Maui code running from an Android emulator.
Keshavulu Dasari 4,665 Reputation points Microsoft External Staff

2025-04-18T18:50:24.1733333+00:00

Hi Mike Spain ,

Good to see that you were able to identify the root cause of the issue! It makes sense that the Azure CLI authentication wouldn't work directly from an Android emulator, as the CLI is typically designed to run in a desktop environment.

Please do not forget to "Accept the answer” and “up-vote” wherever the information provided helps you, this can be beneficial to other community members.

If you have any other questions or are still running into more issues, let me know in the "comments" and I would be glad to assist you.

Answer 1

Hi Mike Spain ,

I'm glad that you were able to resolve your issue and thank you for posting your solution so that others experiencing the same thing can easily reference this!

Since the Microsoft Q&A community has a policy that "The question author cannot accept their own answer. They can only accept answers by others ", I'll repost your solution in case you'd like to "Accept " the answer. Accepted answers show up at the top, resulting in improved discoverability for others.

Issue: Can't upload to a blob from a local dev Maui client, tried VS account, service principal, system environment variables, etc.

Solution: Customer shared - "AzureCliCredential and Azure CLI authentication is not possible from .NET Maui code running from an Android emulator."

Share via

Can't upload to a blob from a local dev Maui client, tried VS account, service principal, system environment variables, etc.

0 additional answers

Your answer