StudyToCert

All certifications / AI-200 / Lessons

Microsoft Certified: Azure AI Cloud Developer Associate AI-200 (replaced AZ-204) · Domain 4: Secure, monitor, and troubleshoot Azure solutions

Managed identities: system-assigned vs user-assigned; DefaultAzureCredential in azure-identity

▶ Watch the overview video

Last reviewed September 25, 2026 · Leer en español

Applications need credentials to call Azure services, and every stored secret is something that can leak, expire or be forgotten in a repository. A managed identity solves this: Azure creates an identity in Microsoft Entra ID for your resource and handles its credentials for you. Your code asks the local platform endpoint for a token and uses it to call any service that supports Microsoft Entra authentication, such as Key Vault, Storage, Service Bus, Cosmos DB, Azure SQL and PostgreSQL.

Free account

Keep reading for free

Create a free StudyToCert account to read the rest of this lesson: 6 more sections, 4 key terms, a real-world example, an exam tip and self-check questions. Every lesson, lab and practice test is free with an account.

Sign up free Log in

Study AI-200 for free
A week-by-week plan with every lesson, quizzes, checkpoint tests, a practice exam and hands-on labs.
Open the AI-200 study plan