{"name":"AZURE_CLIENT_SEND_CERTIFICATE_CHAIN","slug":"azure-client-send-certificate-chain","family":"env","title":"Environment variables","noun":"environment variable","description":"Read by the bundled Azure Identity `EnvironmentCredential` used for Microsoft Foundry sign-in. When it is `true` or `1` (case-insensitive), certificate sign-in through `AZURE_CLIENT_CERTIFICATE_PATH` sends the certificate file's contents as the `x5c` chain with the client assertion; any other value or unset leaves it off.","description_source":"code","described_by":{"bundle":"2.1.286","author":"claude-opus-5-5"},"presence":{"first_seen":"2.1.138","removed_in":null,"in_current_build":true,"newest_mined":"2.1.308","builds":149,"mined_builds":149,"first_cited":null},"aliases":[],"entries":[],"entries_total":0,"docs":[],"docs_total":0,"gates":[],"related":[{"name":"AZURE_CLIENT_CERTIFICATE_PASSWORD","slug":"azure-client-certificate-password","description":"Read by the bundled Azure Identity `EnvironmentCredential` (first in the `DefaultAzureCredential` chain Claude Code uses for Microsoft Foundry, unless `AZURE_TOKEN_CREDENTIALS=dev`). When it signs in with a certificate from `AZURE_CLIENT_CERTIFICATE_PATH`, this password decrypts the PEM's private key; it has no effect when `AZURE_CLIENT_SECRET` is also set, since the secret is tried first."},{"name":"AZURE_CLIENT_CERTIFICATE_PATH","slug":"azure-client-certificate-path","description":"Read by the bundled Azure Identity `EnvironmentCredential` (first in the `DefaultAzureCredential` chain Claude Code uses for Microsoft Foundry, unless `AZURE_TOKEN_CREDENTIALS=dev`). With `AZURE_TENANT_ID` and `AZURE_CLIENT_ID` set and no `AZURE_CLIENT_SECRET`, it signs in as a service principal with the PEM certificate at this path, which must contain a PEM-encoded certificate; `AZURE_CLIENT_CERTIFICATE_PASSWORD` decrypts its key."},{"name":"AZURE_CLIENT_ID","slug":"azure-client-id","description":"Read by the bundled Azure Identity `DefaultAzureCredential` that Claude Code uses for Microsoft Foundry when no Foundry API key or auth token is set and `CLAUDE_CODE_SKIP_FOUNDRY_AUTH` is off. It is the application's client ID for environment credentials (with `AZURE_TENANT_ID` and a client secret, certificate, or username and password) and for workload identity (with `AZURE_TENANT_ID` and `AZURE_FEDERATED_TOKEN_FILE`), and otherwise selects a user-assigned managed identity."},{"name":"AZURE_CLIENT_SECRET","slug":"azure-client-secret","description":"Read by the bundled Azure Identity `EnvironmentCredential` (first in the `DefaultAzureCredential` chain Claude Code uses for Microsoft Foundry, unless `AZURE_TOKEN_CREDENTIALS=dev`). With `AZURE_TENANT_ID` and `AZURE_CLIENT_ID` it signs in as a service principal with this secret, which takes precedence over a certificate path or a username and password."}],"url":"https:\/\/changelogs.core-directive.com\/reference\/env\/azure-client-send-certificate-chain","family_url":"https:\/\/changelogs.core-directive.com\/reference\/env.json"}