[Identity][Core] Add support for the Bleu national partner cloud (France) by devi0042JD · Pull Request #48069 · Azure/azure-sdk-for-python

devi0042JD · 2026-07-15T12:17:30Z

Description

Adds official support for the Bleu national partner cloud (France) across azure-identity, azure-core, and azure-mgmt-core.

azure-identity

New constant AzureAuthorityHosts.AZURE_BLEUCLOUD = "login.sovcloud-identity.fr" in _constants.py (also available through the KnownAuthorities alias).
Added the Bleu Azure Resource Manager scope (https://management.sovcloud-api.fr//.default) to _DEFAULT_AUTHENTICATE_SCOPES so interactive credentials' authenticate() method works against Bleu without explicit scopes.
CHANGELOG entry under 1.26.0b3 (Unreleased) / Features Added.
New test test_well_known_authority_hosts in tests/test_authority.py.

azure-core (1.42.0)

New AzureClouds.AZURE_BLEUCLOUD enum member in _azure_clouds.py. It is automatically accepted by the AZURE_SDK_CLOUD_CONF environment variable and settings.current.azure_cloud (conversion iterates over the enum).
Extended test_convert_azure_cloud to cover conversion of all enum members.

azure-mgmt-core (1.7.0)

get_arm_endpoints now supports AzureClouds.AZURE_BLEUCLOUD, returning:
- resource_manager: https://management.sovcloud-api.fr/
- credential_scopes: ["https://management.sovcloud-api.fr/.default"]
Raised the minimum azure-core requirement to >=1.42.0: the new AzureClouds.AZURE_BLEUCLOUD attribute is evaluated on every get_arm_endpoints call, so running against an older azure-core would raise AttributeError for all clouds.
Bumped the unreleased version from 1.6.1 to 1.7.0 since this adds a feature.
Added the Bleu case to test_arm_endpoints.

With these changes, authenticating against Bleu works with DefaultAzureCredential(authority=AzureAuthorityHosts.AZURE_BLEUCLOUD), and export AZURE_SDK_CLOUD_CONF=AZURE_BLEUCLOUD (or passing cloud_setting=AzureClouds.AZURE_BLEUCLOUD to a generated mgmt client) is enough for recent azure-mgmt-* clients to resolve their base URL and credential scopes for Bleu.

Context

Bleu is a Microsoft national partner cloud operated in France by a joint venture between Orange and Capgemini, designed to meet the French ANSSI SecNumCloud requirements. Its Entra authority host (login.sovcloud-identity.fr) is already a well-known authority host in MSAL Python (AZURE_GOV_FR, since msal 1.35.1).

Testing

pytest sdk/identity/azure-identity/tests/test_authority.py — 3 passed
pytest sdk/identity/azure-identity/tests/test_browser_credential.py tests/test_device_code_credential.py tests/test_interactive_credential.py tests/test_username_password_credential.py — 94 passed, 2 skipped
pytest sdk/core/azure-core/tests/test_settings.py — 61 passed
pytest sdk/core/azure-mgmt-core/tests/test_arm_endpoints.py — 1 passed
End-to-end check: AZURE_SDK_CLOUD_CONF=AZURE_BLEUCLOUD → settings.current.azure_cloud resolves to AzureClouds.AZURE_BLEUCLOUD and get_arm_endpoints returns the Bleu endpoints
black --check clean on all modified files

azure-pipelines · 2026-07-15T12:18:04Z

Azure Pipelines: Successfully started running 1 pipeline(s). 8 pipeline(s) were filtered out due to trigger conditions. There may be pipelines that require an authorized user to comment /azp run to run.

github-actions · 2026-07-15T12:18:05Z

Thank you for your contribution @devi0042JD! We will review the pull request and get back to you soon.

devi0042JD · 2026-07-15T12:37:28Z

@microsoft-github-policy-service agree

devi0042JD · 2026-07-15T12:50:38Z

Dear @yonzhan, Could you please review this PR ?

I work as a Cloud Architect at Bleu, the French national partner cloud. I can confirm the authority host, ARM scope, and DNS suffixes used in this PR are correct and match Bleu environment.

Today, users onboarding to Bleu with the Azure SDK for Python have to configure the authority manually.

Shipping Bleu as a well-known authority in AzureAuthorityHosts would significantly improve that onboarding experience. (especially editors).

azure-pipelines · 2026-07-15T13:37:00Z

Azure Pipelines: Successfully started running 1 pipeline(s). 8 pipeline(s) were filtered out due to trigger conditions. There may be pipelines that require an authorized user to comment /azp run to run.

Copilot

Pull request overview

Adds Bleu national partner cloud support to azure-identity.

Changes:

Adds the Bleu authority host and default ARM scope.
Documents the new support.
Adds authority validation and spell-check configuration.

Reviewed changes

Copilot reviewed 5 out of 5 changed files in this pull request and generated 1 comment.

Show a summary per file

File	Description
`.vscode/cspell.json`	Allows the `sovcloud` term.
`sdk/identity/azure-identity/CHANGELOG.md`	Documents Bleu support.
`azure/identity/_constants.py`	Adds `AZURE_BLEU`.
`azure/identity/_internal/interactive.py`	Adds the Bleu default ARM scope.
`tests/test_authority.py`	Verifies the new authority constant.

devi0042JD · 2026-07-17T12:26:59Z

 _LOGGER = logging.getLogger(__name__)

 _DEFAULT_AUTHENTICATE_SCOPES = {
+    "https://" + KnownAuthorities.AZURE_BLEU: ("https://management.sovcloud-api.fr//.default",),


Done in 4a74cbc — added the Bleu case to the test_authenticate_default_scopes parametrization ((KnownAuthorities.AZURE_BLEUCLOUD, "https://management.sovcloud-api.fr//.default")).

… cloud (France) Adds the BleuCloud (login.sovcloud-identity.fr) authority host constant and its default ARM scope for interactive credentials' authenticate() method.

…artner cloud (France) azure-core: adds the AZURE_BLEUCLOUD member to the AzureClouds enum so the Bleu cloud can be selected via AZURE_SDK_CLOUD_CONF or settings.azure_cloud. azure-mgmt-core: get_arm_endpoints now returns the Bleu ARM endpoint (management.sovcloud-api.fr) and credential scopes, and the minimum azure-core requirement is raised to 1.42.0 accordingly.

devi0042JD · 2026-07-16T15:32:47Z

Note on the two failing checks — both are unrelated to this PR:

1. python - pullrequest — azure-ai-textanalytics playback failures

The failing tests are the 14 recorded tests of sdk/cognitivelanguage/azure-ai-textanalytics (all 3 OS × whl/sdist/mindependency). They run here only because this PR touches azure-core, which triggers dependent-package testing.

The failure is a URI mismatch in playback:

request <https://Sanitized.cognitiveservices.azure.com//language/analyze-text/jobs?api-version=2025-11-15-preview>
record  <https://Sanitized.cognitiveservices.azure.com/language/analyze-text/jobs?api-version=2025-11-15-preview>

The double slash comes from that package's test fixtures, which set text_analysis_endpoint="https://Sanitized.cognitiveservices.azure.com/" (trailing slash) while the generated client appends /language to the endpoint. The recordings expect a single slash, so the test proxy finds no matching entry (ResourceNotFoundError: Playback failure).

This looks like a latent issue in those fixtures, likely surfaced by the test-proxy bump to 1.0.0-dev.20260521.2 on May 27 (#47176) — stricter URI matching — and it only shows up on PRs that touch core. Nothing in this PR touches URL construction (the azure-core diff is an enum member, a changelog entry, a version bump, and a test), and the only azure-core commit on main since 1.41.0 is an unrelated datetime refactor (#46603). The last two runs of this pipeline on main (June 26) were also failing.

2. python - autorest - pr

Fails in "Prepare Environment" while cloning autorest.python: pnpm@9.5.0 is rejected because its npm registry signature can no longer be verified (npm signing-key rotation). Infrastructure issue, affects any PR running this pipeline.

Happy to help with a fix for the textanalytics fixtures in a separate PR if useful.

azure-pipelines · 2026-07-17T10:29:34Z

Azure Pipelines: Successfully started running 3 pipeline(s). 6 pipeline(s) were filtered out due to trigger conditions. There may be pipelines that require an authorized user to comment /azp run to run.

Copilot

Pull request overview

Copilot reviewed 14 out of 14 changed files in this pull request and generated 3 comments.

devi0042JD · 2026-07-17T12:27:01Z

 _LOGGER = logging.getLogger(__name__)

 _DEFAULT_AUTHENTICATE_SCOPES = {
+    "https://" + KnownAuthorities.AZURE_BLEUCLOUD: ("https://management.sovcloud-api.fr//.default",),


Done in 4a74cbc — the parametrization now covers the Bleu default scope.

devi0042JD · 2026-07-17T12:27:02Z

+    AZURE_BLEUCLOUD = "AZURE_BLEUCLOUD"
+    """Bleu national partner cloud (France)"""


Done in 4a74cbc — AZURE_BLEUCLOUD is now listed in the accepted values of AZURE_SDK_CLOUD_CONF in both ENVIRONMENT_VARIABLES.md and CLIENT_LIBRARY_DEVELOPER.md.

devi0042JD · 2026-07-17T12:27:04Z

+      ]
+    },
+    {
+      "filename": "sdk/core/azure-core/**",


This one is a false positive: cspell's ignorePaths in .vscode/cspell.json includes sdk/**/azure-mgmt**/**, which excludes azure-mgmt-core files from the spelling check even when they are passed explicitly as changed files. Empirically, the "Check spelling (cspell)" step passed on the previous CI run (build 6572249), which already contained all the azure-mgmt-core changes. No override extension needed.

…nt AZURE_BLEUCLOUD - Add the Bleu case to test_authenticate_default_scopes so the default ARM scope for AzureAuthorityHosts.AZURE_BLEUCLOUD has regression coverage. - List AZURE_BLEUCLOUD in the accepted values of AZURE_SDK_CLOUD_CONF in ENVIRONMENT_VARIABLES.md and CLIENT_LIBRARY_DEVELOPER.md.

Copilot

Pull request overview

Copilot reviewed 17 out of 17 changed files in this pull request and generated 1 comment.

devi0042JD · 2026-07-17T12:33:58Z

+    AZURE_BLEUCLOUD = "AZURE_BLEUCLOUD"
+    """Bleu national partner cloud (France)"""


Done in f4be3b9 — AZURE_BLEUCLOUD is now listed in the Settings docstring accepted values (settings.py), matching the two Markdown guides. The commit also normalizes the module docstring formatting per black, since the file is now part of the diff.

Copilot

Pull request overview

Copilot reviewed 18 out of 18 changed files in this pull request and generated no new comments.

github-actions Bot added Azure.Identity Community Contribution Community members are working on the issue customer-reported Issues that are reported by GitHub users external to the Azure organization. labels Jul 15, 2026

github-project-automation Bot added this to Azure Identity SDK Improvements Jul 15, 2026

github-project-automation Bot moved this to Untriaged in Azure Identity SDK Improvements Jul 15, 2026

devi0042JD force-pushed the identity/add-azure-bleu-authority-host branch from d9bde6f to 32a5ae1 Compare July 15, 2026 12:32

devi0042JD marked this pull request as ready for review July 15, 2026 13:36

devi0042JD requested a review from danieljurek as a code owner July 15, 2026 13:36

Copilot AI review requested due to automatic review settings July 15, 2026 13:36

devi0042JD requested review from a team, benbp and mikeharder as code owners July 15, 2026 13:36

devi0042JD requested review from JonathanCrd, KarishmaGhiya, anannya03, g2vinay, kashifkhan, minhanh-phan and vukelich July 15, 2026 13:36

Copilot started reviewing on behalf of devi0042JD July 15, 2026 13:37 View session

Copilot AI reviewed Jul 15, 2026

View reviewed changes

devi0042JD added 2 commits July 15, 2026 14:14

Add AzureAuthorityHosts.AZURE_BLEUCLOUD for the Bleu national partner…

93fdc8a

… cloud (France) Adds the BleuCloud (login.sovcloud-identity.fr) authority host constant and its default ARM scope for interactive credentials' authenticate() method.

Add sovcloud and BLEUCLOUD to cspell overrides for azure-identity

cefe7a8

devi0042JD force-pushed the identity/add-azure-bleu-authority-host branch from 14d95b6 to cefe7a8 Compare July 15, 2026 14:15

devi0042JD changed the title ~~[Identity] Add AzureAuthorityHosts.AZURE_BLEU for the Bleu national partner cloud (France)~~ [Identity] Add AzureAuthorityHosts.AZURE_BLEUCLOUD for the Bleu national partner cloud (France) Jul 15, 2026

This was referenced Jul 15, 2026

[Identity] Add AzureAuthorityHosts.AzureBleuCloud for Bleu Cloud, the national partner cloud for France Azure/azure-sdk-for-net#61022

Open

[Core] Add AzureClouds.AZURE_BLEUCLOUD cloud setting for the Bleu national partner cloud (France) #48072

Closed

devi0042JD added 2 commits July 16, 2026 13:34

Add BLEUCLOUD and sovcloud to cspell overrides for azure-core

7b5154e

devi0042JD requested review from ChenxiJiang333, iscai-msft, msyyc and xirzec as code owners July 16, 2026 13:36

devi0042JD changed the title ~~[Identity] Add AzureAuthorityHosts.AZURE_BLEUCLOUD for the Bleu national partner cloud (France)~~ [Identity][Core] Add support for the Bleu national partner cloud (France) Jul 16, 2026

devi0042JD marked this pull request as draft July 16, 2026 13:42

Merge branch 'main' into identity/add-azure-bleu-authority-host

69765f8

devi0042JD marked this pull request as ready for review July 17, 2026 10:29

Copilot AI review requested due to automatic review settings July 17, 2026 10:29

Copilot started reviewing on behalf of devi0042JD July 17, 2026 10:30 View session

Copilot AI reviewed Jul 17, 2026

View reviewed changes

Copilot AI review requested due to automatic review settings July 17, 2026 12:26

Copilot started reviewing on behalf of devi0042JD July 17, 2026 12:27 View session

Copilot AI reviewed Jul 17, 2026

View reviewed changes

Copilot AI review requested due to automatic review settings July 17, 2026 12:33

List AZURE_BLEUCLOUD in the Settings docstring accepted values

f4be3b9

devi0042JD force-pushed the identity/add-azure-bleu-authority-host branch from 79bed56 to f4be3b9 Compare July 17, 2026 12:33

Copilot started reviewing on behalf of devi0042JD July 17, 2026 12:33 View session

Copilot AI reviewed Jul 17, 2026

View reviewed changes

		AZURE_BLEUCLOUD = "AZURE_BLEUCLOUD"
		"""Bleu national partner cloud (France)"""

Uh oh!

Conversation

devi0042JD commented Jul 15, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Description

azure-identity

azure-core (1.42.0)

azure-mgmt-core (1.7.0)

Context

Testing

Uh oh!

azure-pipelines Bot commented Jul 15, 2026

Uh oh!

github-actions Bot commented Jul 15, 2026

Uh oh!

devi0042JD commented Jul 15, 2026

Uh oh!

devi0042JD commented Jul 15, 2026

Uh oh!

azure-pipelines Bot commented Jul 15, 2026

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Reviewed changes

Uh oh!

devi0042JD Jul 17, 2026

Choose a reason for hiding this comment

Uh oh!

devi0042JD commented Jul 16, 2026

Uh oh!

azure-pipelines Bot commented Jul 17, 2026

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Uh oh!

devi0042JD Jul 17, 2026

Choose a reason for hiding this comment

Uh oh!

devi0042JD Jul 17, 2026

Choose a reason for hiding this comment

Uh oh!

devi0042JD Jul 17, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Uh oh!

devi0042JD Jul 17, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

devi0042JD commented Jul 15, 2026 •

edited

Loading