auth

Manage authentication

Authentication scope: local

login

Log in to Microsoft Fabric via device code flow, service principal, or WAM broker

fabio auth login

Flag	Type	Required	Description
--tenant	string	No	Azure AD tenant ID (defaults to “common” for multi-tenant; required for –service-principal)
--scope	string	No	OAuth2 scope (defaults to Fabric API scope)
--service-principal	bool	No	Authenticate as a service principal (requires –tenant and –client-id)
--wam	bool	No	Use Windows Web Account Manager (WAM) broker for SSO (Windows only)
--browser	bool	No	Use browser-based login with PKCE (opens system browser, supports macOS Enterprise SSO)
--client-id	string	No	Application (client) ID of the service principal
--client-secret	string	No	Client secret for service principal authentication
--certificate	string	No	Path to a PEM or PFX certificate file for service principal authentication
--certificate-password	string	No	Password for the certificate file (PFX/PKCS12)
--federated-token	string	No	Federated token (OIDC assertion) for workload identity authentication
--federated-token-file	string	No	Path to a file containing the federated token (OIDC assertion)

Read-only · Returns object

logout

Log out and clear cached credentials

fabio auth logout

Mutates state · Returns void

status

Show current authentication status and credential source

fabio auth status

Read-only · Returns object