{"name":"AZURE_CLIENT_CERTIFICATE_PATH","slug":"azure-client-certificate-path","family":"env","title":"Environment variables","noun":"environment variable","description":"Read by the bundled Azure Identity `EnvironmentCredential` (first in the `DefaultAzureCredential` chain Claude Code uses for Microsoft Foundry, unless `AZURE_TOKEN_CREDENTIALS=dev`). With `AZURE_TENANT_ID` and `AZURE_CLIENT_ID` set and no `AZURE_CLIENT_SECRET`, it signs in as a service principal with the PEM certificate at this path, which must contain a PEM-encoded certificate; `AZURE_CLIENT_CERTIFICATE_PASSWORD` decrypts its key.","description_source":"code","described_by":{"bundle":"2.1.286","author":"claude-opus-5-5"},"presence":{"first_seen":"2.1.138","removed_in":null,"in_current_build":true,"newest_mined":"2.1.308","builds":149,"mined_builds":149,"first_cited":null},"aliases":[],"entries":[],"entries_total":0,"docs":[],"docs_total":0,"gates":[],"related":[{"name":"AZURE_CLIENT_CERTIFICATE_PASSWORD","slug":"azure-client-certificate-password","description":"Read by the bundled Azure Identity `EnvironmentCredential` (first in the `DefaultAzureCredential` chain Claude Code uses for Microsoft Foundry, unless `AZURE_TOKEN_CREDENTIALS=dev`). When it signs in with a certificate from `AZURE_CLIENT_CERTIFICATE_PATH`, this password decrypts the PEM's private key; it has no effect when `AZURE_CLIENT_SECRET` is also set, since the secret is tried first."}],"url":"https:\/\/changelogs.core-directive.com\/reference\/env\/azure-client-certificate-path","family_url":"https:\/\/changelogs.core-directive.com\/reference\/env.json"}