Summary

Completed

Having completed this module, you can describe how Microsoft Entra ID and Azure RBAC help Java applications connect to Azure OpenAI in Microsoft Foundry without API keys. You learned how to assign Azure OpenAI RBAC roles, use DefaultAzureCredential during local development, and use system-assigned or user-assigned managed identities for Azure-hosted workloads.

These practices help you implement keyless authentication so your Java apps can request Azure OpenAI tokens from Microsoft Entra ID and avoid storing credentials in application code or configuration.

Further reading/learning

To continue your learning journey, go to:

• Use Azure OpenAI without keys
• How to switch between OpenAI and Azure OpenAI endpoints for Java
• Azure Identity client library for Java: DefaultAzureCredential