Skip to main content

​
SYNOPSIS

Switches Azure CLI authentication between browser and WAM modes.

​
SYNTAX

​
Toggle (Default)

Switch-AzureCliAuthMode [-ProgressAction <ActionPreference>] [<CommonParameters>]

​
Specify

Switch-AzureCliAuthMode [-Mode <String>] [-ProgressAction <ActionPreference>] [<CommonParameters>]

​
GetCurrent

Switch-AzureCliAuthMode [-GetCurrent] [-ProgressAction <ActionPreference>] [<CommonParameters>]

​
DESCRIPTION

Toggles the Windows broker (WAM) setting when using az login. If no mode is specified, it toggles between modes. If a mode is specified, it switches to that mode. Beginning with Azure CLI version 2.61.0, Web Account Manager (WAM) is the default authentication method on Windows. WAM is a Windows 10+ component that acts as an authentication broker. An authentication broker is an application that runs on a user’s machine. It manages the authentication handshakes and token maintenance for connected accounts. Using WAM has several benefits:
  • Enhanced security. See Conditional Access: Token protection (preview).
  • Support for Windows Hello, conditional access policies, and FIDO keys.
  • Streamlined single sign-on.
  • Bug fixes and enhancements shipped with Windows.
Technically this opens a window for login. But, in some cases, especially when connecting to client environments, it might be preferable to use the browser-based authentication method.

​
EXAMPLES

​
EXAMPLE 1

Switch-AzureCliAuthMode
Toggles between browser and WAM authentication modes.

​
EXAMPLE 2

Switch-AzureCliAuthMode -Mode Browser
Switches to browser-based authentication.

​
EXAMPLE 3

Switch-AzureCliAuthMode -Mode WAM
Switches to Web Account Manager authentication.

​
EXAMPLE 4

Switch-AzureCliAuthMode -GetCurrent
Displays the current authentication mode.

​
PARAMETERS

​
-Mode

The authentication mode to switch to. Valid values are ‘Browser’ or ‘WAM’. If not specified, the function will toggle between the current modes. 
Type: String
Parameter Sets: Specify
Aliases:

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

​
-GetCurrent

Displays the current authentication mode without making any changes. 
Type: SwitchParameter
Parameter Sets: GetCurrent
Aliases:

Required: False
Position: Named
Default value: False
Accept pipeline input: False
Accept wildcard characters: False

​
-ProgressAction

{{ Fill ProgressAction Description }} 
Type: ActionPreference
Parameter Sets: (All)
Aliases: proga

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

​
CommonParameters

This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable. For more information, see about_CommonParameters.

​
INPUTS

​
OUTPUTS

​
NOTES