Support for service principal when using Azure Blob Storage

[saswatac]

I am following https://github.com/kahing/goofys/blob/master/README-azure.md to mount azure blob storage.
I want to avoid using storage key, instead i am using a service principal which has read/write/list/delete access on the container.

As per the README, i have also installed azure cli and login using service principal as follows

az login --service-principal --username $AZURE_STORAGE_SPN_CLIENT_ID --password $AZURE_STORAGE_SPN_CLIENT_SECRET --tenant $AZURE_STORAGE_SPN_TENANT_ID

followed by set subscription

az account set --subscription $SUBSCRIPTION_ID

and then mount -

goofys -o allow_other --file-mode 0777 --dir-mode 0777 wasb:https://$BUCKET@$STORAGE_ACCOUNT.blob.core.windows.net $MOUNT_DIR

2021/05/03 13:55:43.245262 main.FATAL Unable to mount file system, see syslog for details

In syslog i see -

May  3 13:55:42 ws-saswata /usr/local/bin/goofys[1057]: main.FATAL Mounting file system: adal: Refresh request failed. Status Code = '400'. Response body: {"error":"invalid_request","error_description":"Identity not found"}

Does goofys support the azure service principal login credentials?

[kesavkolla]

Any update on this? Has anyone figured out how to use service account with goofys.