How to generate Azure token for our App created on Azure Entra ID which I can use to pass to a script for authentication?

Hey Prem, Azure doesn’t really provide a “one-click” way in the portal to generate a long-lived token you can copy & paste—access tokens are short-lived (usually 1 hour) and need to be requested from Azure AD’s OAuth2 endpoint. The easiest manual way is to use the Azure CLI (or PowerShell) to fetch the token and then pipe it into your Python script. Here’s a quick recipe:

1. Make sure your Entra app has: • A client ID • A client secret (under Certificates & secrets) • The right API permissions (and admin consent granted) for the resource you’re calling
2. Open Cloud Shell (or your local shell with az installed) and sign in as your service principal:

   
      az login --service-principal \
   
        --username <YOUR-APP-CLIENT-ID> \
   
        --password <YOUR-CLIENT-SECRET> \
   
        --tenant <YOUR-TENANT-ID>
   
   

3. Request an access token for your target resource (replace <RESOURCE-URI> with the App ID URI or audience your script needs):

   
      az account get-access-token \
   
        --resource <RESOURCE-URI> \
   
        --query accessToken \
   
        --output tsv
   
   

4. Capture that token into a variable or file and pass it to your Python script. For example, in Bash:

   
      TOKEN=$(az account get-access-token --resource https://management.azure.com/ --query accessToken -o tsv)
   
      python myscript.py --token "$TOKEN"
   
   

If you prefer PowerShell, you can do something similar with Get-AzAccessToken:

Connect-AzAccount

$tok = Get-AzAccessToken -ResourceUrl "https://management.azure.com/"

python myscript.py --token $tok.Token

If you absolutely need to “see” the raw HTTP call, you can also fire up Postman (or curl) against the v2 OAuth2 token endpoint:

POST https://login.microsoftonline.com/{tenant}/oauth2/v2.0/token

Form-data body:

• grant_type=client_credentials

• client_id=…

• client_secret=…

• scope=<RESOURCE>/.default

That returns JSON with the access_token you can copy/paste.

Hope one of these approaches works for you—let me know if you need help with the resource URI, token lifetime, or v1 vs. v2 endpoint details!

References

• Quickstart: Register an application (Microsoft Entra)

https://learn.microsoft.com/entra/identity-platform/quickstart-register-app

• Issue Entra tokens with Azure CLI

https://learn.microsoft.com/azure/devops/cli/entra-tokens?view=azure-devops

• Authenticate applications with Microsoft Entra ID

https://learn.microsoft.com/entra/architecture/authenticate-applications-and-users