auth

Manage authentication

Authentication scope: local

login

Validate Azure CLI authentication, or use an explicit interactive/workload flow

fabio auth login

Flag	Type	Required	Description
--tenant	string	No	Microsoft Entra tenant ID (uses Azure CLI’s current tenant by default)
--scope	string	No	OAuth2 scope (defaults to Fabric API scope)
--service-principal	bool	No	Authenticate as a service principal (requires –tenant and –client-id)
--device-code	bool	No	Use device-code login with a customer-managed public client
--wam	bool	No	Use Windows WAM with a customer-managed public client (Windows only)
--browser	bool	No	Use browser PKCE with a customer-managed public client
--client-id	string	No	Public-client ID for interactive login, or application ID for a service principal
--client-secret	string	No	Client secret for service principal authentication
--certificate	string	No	Path to a PEM or PFX certificate file for service principal authentication
--certificate-password	string	No	Password for the certificate file (PFX/PKCS12)
--federated-token	string	No	Federated token (OIDC assertion) for workload identity authentication
--federated-token-file	string	No	Path to a file containing the federated token (OIDC assertion)

Mutates state · Returns object

logout

Clear Fabio-managed cached credentials (ambient credentials remain available)

fabio auth logout

Mutates state · Returns object

status

Show current authentication status and credential source

fabio auth status

Read-only · Returns object