How to use az login with a federated service principal

Question

I want to deploy resources in Azure through a workspace in Terraform Cloud.

I am using Terraform Cloud's dynamic provider credentials feature for authenticating to Azure, as described in this article. It involves creating a service principal with federated credentials and hence no secrets.

Its working fine and I am able to deploy resources in Azure.

However, I have a local-exec resource that uses az login

az login --service-principal -u