Skip to main content

SYNOPSIS

Switches Azure CLI authentication between browser and WAM modes.

SYNTAX

Toggle (Default)

Specify

GetCurrent

DESCRIPTION

Toggles the Windows broker (WAM) setting when using az login. If no mode is specified, it toggles between modes. If a mode is specified, it switches to that mode. Beginning with Azure CLI version 2.61.0, Web Account Manager (WAM) is the default authentication method on Windows. WAM is a Windows 10+ component that acts as an authentication broker. An authentication broker is an application that runs on a user’s machine. It manages the authentication handshakes and token maintenance for connected accounts. Using WAM has several benefits:
  • Enhanced security. See Conditional Access: Token protection (preview).
  • Support for Windows Hello, conditional access policies, and FIDO keys.
  • Streamlined single sign-on.
  • Bug fixes and enhancements shipped with Windows.
Technically this opens a window for login. But, in some cases, especially when connecting to client environments, it might be preferable to use the browser-based authentication method.

EXAMPLES

EXAMPLE 1

Toggles between browser and WAM authentication modes.

EXAMPLE 2

Switches to browser-based authentication.

EXAMPLE 3

Switches to Web Account Manager authentication.

EXAMPLE 4

Displays the current authentication mode.

PARAMETERS

-Mode

The authentication mode to switch to. Valid values are ‘Browser’ or ‘WAM’. If not specified, the function will toggle between the current modes.

-GetCurrent

Displays the current authentication mode without making any changes.

CommonParameters

This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable. For more information, see about_CommonParameters.

INPUTS

OUTPUTS

NOTES

https://ps365.clidsys.com/docs/commands/Switch-AzureCliAuthMode