Authentication types by deployment methods in Azure App Service
Azure App Service lets you deploy your web application code and configuration by using multiple options. These deployment options may support one or more authentication mechanisms. This article provides details about various authentication mechanisms supported by different deployment methods.
Note
To disable basic authentication for your App Service app, see Disable basic authentication in App Service deployments.
| Deployment method | Authentication | Reference Documents |
|---|---|---|
| Azure CLI | Microsoft Entra ID | In Azure CLI, version 2.48.1 or higher, the following commands have been modified to use Microsoft Entra if basic authentication is turned off for your web app or function app: - az webapp up - az webapp deploy - az webapp deployment source config-zip - az webapp log deployment show - az webapp log deployment list - az webapp log download - az webapp log tail - az webapp browse - az webapp create-remote-connection - az webapp ssh - az functionapp deploy - az functionapp log deployment list - az functionapp log deployment show - az functionapp deployment source config-zip For more information, see az appservice and az webapp. |
| Azure PowerShell | Microsoft Entra | In Azure PowerShell, version 9.7.1 or above, Microsoft Entra is available for App Service. For more information, see PowerShell samples for Azure App Service. |
| SCM/Kudu/OneDeploy REST endpoint | Basic authentication Microsoft Entra |
Deploy files to App Service |
| Kudu UI | Basic authentication Microsoft Entra |
Deploy files to App Service |
| FTP\FTPS | Basic authentication | Deploy your app to Azure App Service using FTP/S |
| Visual Studio | Basic authentication | Quickstart: Deploy an ASP.NET web app Develop and deploy WebJobs using Visual Studio Troubleshoot an app in Azure App Service using Visual Studio GitHub Actions integration in Visual Studio Deploy your application to Azure using GitHub Actions workflows created by Visual Studio |
| Visual Studio Code | Microsoft Entra | Quickstart: Deploy an ASP.NET web app Working with GitHub in VS Code |
| GitHub with GitHub Actions | Publish profile (basic authentication) Service principal (Microsoft Entra) OpenID Connect (Microsoft Entra) |
Deploy to App Service using GitHub Actions |
| GitHub with App Service build service as build engine | Basic authentication | Continuous deployment to Azure App Service |
| Azure Repos with App Service build service as build engine | Basic authentication | Continuous deployment to Azure App Service |
| Azure Repos with Azure Pipelines as build engine | Publish profile (basic authentication) Azure DevOps service connection |
Deploy to App Service using GitHub Actions |
| Bitbucket | Basic authentication | Continuous deployment to Azure App Service |
| Local Git | Basic authentication | Local Git deployment to Azure App Service |
| External Git repository | Basic authentication | Setting up continuous deployment using manual steps |
| Run directly from an uploaded ZIP file | Microsoft Entra | Run your app in Azure App Service directly from a ZIP package |
| Run directly from external URL | Not applicable (outbound connection) | Run from external URL instead |
| Azure Web app plugin for Maven (Java) | Microsoft Entra | Quickstart: Create a Java app on Azure App Service |
| Azure WebApp Plugin for Gradle (Java) | Microsoft Entra | Configure a Java app for Azure App Service |
| Webhooks | Basic authentication | Web hooks |
| App Service migration assistant | Basic authentication | Azure App Service migration tools |
| App Service migration assistant for PowerShell scripts | Basic authentication | Azure App Service migration tools |