How can I set the client Id for a Function App without setting explicit authentication

Question

Hi,

I have a function App in my environment where the authentication is not explicitly set up, since the http triggered functions currently use function key as the anonymous level

However In the same function app we have set up durable functions monitor , as we can't use a dedicated function app just for durable function monitor for some reason.

Hence we don't prefer to set explicit authentication using Authentication tab in the function app. Is there any way I could set the environment variable WEBSITE_AUTH_CLIENT_ID for the function app without setting the authentication tab in the function app?

Since we do want to authenticate the durable function monitor.

Looking at the code of https://github.com/microsoft/DurableFunctionsMonitor, I am trying to make the authentication work by setting some environment variables like WEBSITE_AUTH_CLIENT_ID and a couple other that start with WEBSITE_

Appreciate your help in this

Answer 1

Hello Parag Kale,

If you're leveraging the Graph library, you can configure Azure AD settings like ClientId in your Function App, add them as application settings using the format AzureAd__ClientId and AzureAd__TenantId (note the double underscores for nested keys). These will be available via IConfiguration in your code, e.g., _configuration["AzureAd:ClientId"] or _configuration.GetSection("AzureAd")["ClientId"]. If you're not leveraging MSAL, you can simply create ClientId application setting/environment variable and pull it in code using _configuration["ClientId"];. For local development, you can set the same keys in local.settings.json under the Values section. This approach keeps your configuration environment-specific, secure, and easy to manage.