OptionalclientEntra ID client (application) ID. Required on Create.
OptionalcredentialHow the service principal proves its identity. Exactly one variant must be
set on Create. Today only client_secret is supported.
(-- A oneof so additional proof mechanisms can be added as non-breaking
variants without changing the tenant_id / client_id identity fields. --)
Entra ID client secret. Supply the value in client_secret.plaintext.
OptionaltenantEntra ID (Azure AD) tenant ID. Required on Create.
Entra ID (Azure AD) service-principal authentication. The
tenant_idandclient_ididentify the service principal, andclient_secretauthenticates it. AI Gateway exchanges these credentials for an Entra bearer token for requests to Azure OpenAI or Microsoft Foundry.