Put another way, they should distinguish user-remediable errors. The value of this is primarily allowing chained credentials to short-circuit. For example, if a service principal is fully configured in environment variables and one of those values is incorrect, the user clearly intended the service principal to be used, so DefaultAzureCredential should not continue to attempt authenticating with a managed identity.
Put another way, they should distinguish user-remediable errors. The value of this is primarily allowing chained credentials to short-circuit. For example, if a service principal is fully configured in environment variables and one of those values is incorrect, the user clearly intended the service principal to be used, so
DefaultAzureCredentialshould not continue to attempt authenticating with a managed identity.