[azidentity] DefaultAzureCredential: add exclude_managed_identity_credential, etc. about azure-sdk-for-go HOT 3 CLOSED

@chlowell That sounds reasonable. I think though those design principles should be established across the different languages, otherwise it becomes confusing why the Python SDK has the options and others don't.

from azure-sdk-for-go.

Thank you for your feedback. Tagging and routing to the team member best able to assist.

from azure-sdk-for-go.

Thanks for opening this issue. There are a couple big reasons we don't plan to add options like these. First, they would encourage people to try to make DefaultAzureCredential work in scenarios where it would be better to use a more specific credential type instead. Using a more specific type is generally the best approach in production because it makes authentication more predictable and robust, and easier to debug when something goes wrong. Second, they would needlessly complicate the API. There's no need to selectively disable parts of DefaultAzureCredential because all the credential types it uses are available separately and ChainedTokenCredential enables building a similar chain of them.

from azure-sdk-for-go.