Unable to connect to event hub using TokenCredential

Madeline Stager 31

When attempting to connect to event hub using token credentials I get a timeout from the cancelation token and no response from the event hub service. Sample bellow shows trying to get the event hub properties, I saw the same behavior when trying to send events to event hub. I tried using MSI credentials as in the sample bellow as well as my Azure identity credentials using InteractiveBrowserCredential. When using the InteractiveBrowserCredential, I was prompted for my credentials and entered them, and then received a token cancelation exception after some time. I have testing using Azure.Messaging.EventHubs and Azure.Messaging.EventHubs.Producer .net SDK version 5.7.0 and 5.7.1.

How can I connect to event hub using MSI?

string ednpoint = "{EventHubInstanceName}.servicebus.windows.net";
string eventHubName = "sessionqueue";
string msiClientId = "{MSIClientId}";
var creds= new DefaultAzureCredential(new DefaultAzureCredentialOptions { ManagedIdentityClientId = msiClientId });
var eventHubClient = new EventHubProducerClient(ednpoint, eventHubName, creds);

using (var cts = new CancellationTokenSource(TimeSpan.FromMinutes(2)))
{
var properties = await eventHubClient.GetEventHubPropertiesAsync(cts.Token).ConfigureAwait(false);
}

HimanshuSinha-msft 19,381 Reputation points Microsoft Employee

2022-07-11T20:59:47.897+00:00

Hello @Madeline Stager ,
Thanks for the question and using MS Q&A platform.

Since you are internal to Microsoft , we did reahed out to you .

Thanks
Himanshu
HimanshuSinha-msft 19,381 Reputation points Microsoft Employee

2022-07-19T19:46:19.92+00:00

Hello @Madeline Stager ,
Thanks for the patience , unfortunately we are not getting the kind of response from the team here . if you have a support plan you may file a support ticket, else could you please send an email to azcommunity@microsoft.com with the below details, so that we can create a one-time-free support ticket for you to work closely on this matter.
Subscription ID:
Subject : Attn Himanshu
Please let me know once you have done the same.
Thanks
Himanshu
HimanshuSinha-msft 19,381 Reputation points Microsoft Employee

2022-08-01T19:08:02.95+00:00

Hello @Madeline Stager ,
We haven’t received any email from you as requested in the last response and was just checking back to see if you have a resolution . In case if you have any resolution please do share that same with the community as it can be helpful to others . Otherwise, please respond back with the more details as requested and we will try to help .
Thanks
Himanshu

Vinay Raj 0

I am using the tokenCredential like this:

TokenCredential tokenCredential = new DefaultAzureCredentialBuilder()            		.workloadIdentityClientId(<clientId>)            
.managedIdentityClientId(<Id>)  
.tenantId(<tenant-id>)            
.authorityHost(AzureAuthorityHosts.AZURE_PUBLIC_CLOUD)            
.build();    

processorClient = new EventProcessorClientBuilder()                 
.consumerGroup(<grpName>)           
.credential(<namespace>,<hubname>, tokenCredential)            
.checkpointStore(new BlobCheckpointStore(blobContainerClient))            .loadBalancingUpdateInterval(Duration.ofSeconds(<LOAD_BALANCE_INTERVAL>))            .partitionOwnershipExpirationInterval(Duration.ofSeconds(OWNERSHIP_INTERVAL))            .loadBalancingStrategy(LoadBalancingStrategy.GREEDY)            
.processEventBatch(consumer,<BATCH_SIZE>,Duration.ofSeconds(<WAIT_TIME>))                        .buildEventProcessorClient();

on runtime no error is thrown but the messages are not getting consumed.