Skip to content

Distributed cache solution for managed identity #4042

@neha-bhargava

Description

@neha-bhargava

Since there is no client id in case of system assigned managed identity, the app token cache that we use to cache managed identity tokens can fail for a scenario where distributed cache is used for 2 different resources. Due to same cache key for both the resources, the tokens can be used interchangeably and this is a possible security concern.

Metadata

Metadata

Assignees

No one assigned

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions