Difference between Service Principal and Managed Identities in Azure
Difference between Service Principal and Managed Identities in Azure
Difference between Service Principal and Managed Identities in Azure
Re: Difference between Service Principal and Managed Identities in Azure
Internally, managed identities are service principals of a special type, which are locked to only be used with Azure resources. When the managed identity is deleted, the corresponding service principal is automatically removed. Also, when a User-Assigned or System-Assigned Identity is created, the Managed Identity Resource Provider (MSRP) issues a certificate internally to that identity.
*Source: [What are managed identities for Azure resources?](https://learn.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/overview)*
and
**So what’s the difference?**
Put simply, the difference between a managed identity and a service principal is that a managed identity manages the creation and automatic renewal of a service principal on your behalf.
*Source: [What’s an Azure Service Principal and Managed Identity?](https://thecloudhub.com/2019/03/whats-an-azure-service-principal-and-managed-identity/)*
**EDIT:**
Since there seems to be some discussion around the fact User Assigned Managed Identities also exist:
A user assigned *managed identity* is created by the user. The underlying *service principal* that's used for accessing resources, however, is being created and automatically renewed for the user. So every type of managed identity (both system and user assigned) is an abstraction of an underlying Service Principal.
*Source: [What are managed identities for Azure resources?](https://learn.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/overview)*
and
**So what’s the difference?**
Put simply, the difference between a managed identity and a service principal is that a managed identity manages the creation and automatic renewal of a service principal on your behalf.
*Source: [What’s an Azure Service Principal and Managed Identity?](https://thecloudhub.com/2019/03/whats-an-azure-service-principal-and-managed-identity/)*
**EDIT:**
Since there seems to be some discussion around the fact User Assigned Managed Identities also exist:
A user assigned *managed identity* is created by the user. The underlying *service principal* that's used for accessing resources, however, is being created and automatically renewed for the user. So every type of managed identity (both system and user assigned) is an abstraction of an underlying Service Principal.