OptionalclientEntra ID client (application) ID. Required on Create.
OptionalcredentialHow the service principal proves its identity. Exactly one variant must be
set on Create. Today only client_secret is supported.
(-- A oneof so additional proof mechanisms can be added as non-breaking
variants without changing the tenant_id / client_id identity fields. --)
Entra ID client secret. Supplied as inline plaintext via
ProviderSecret.plaintext.
OptionaltenantEntra ID (Azure AD) tenant ID. Required on Create.
Entra ID (Azure AD) service-principal auth: AI Gateway exchanges the
tenant_id+client_ididentify the service principal, and thecredentialoneof proves that identity, exchanged for an Entra bearer token on outbound requests via the OAuth2 client-credentials grant. Shared by the Azure OpenAI and Microsoft Foundry provider configs.