stado cloud login
Invocation
stado cloud login [OPTIONS] --provider <PROVIDER> --tenant <TENANT> --account <ACCOUNT> --role <ROLE>Purpose
Sign in through Microsoft Account federation and encrypt the refresh token in Skarbiec
Required inputs and options
| Input or option | Contract |
|---|---|
--provider <PROVIDER> | Provider to sign in to. No provider is assumed Possible values: - azure: Microsoft Azure: Entra sign-in and Azure RBAC |
--tenant <TENANT> | Azure tenant containing the guest account and subscription |
--account <ACCOUNT> | Login hint for the federated Microsoft account |
--role <ROLE> | Vault role whose item receives the refresh token, stated by the operator; the item is created and tagged when no item plays it yet |
--no-open | Print the authorization URL without launching the system browser |
--json | Print the signed-in session as JSON instead of lines |
Output and state effect
It performs the operation described above and emits its operator result on standard output or standard error. Any state change is limited to the resources and records named by the purpose and options on this page.
Refusals
- Before dispatch, Stado refuses a missing required token shown in the invocation, an unknown option, or a value outside a listed value set; argument-usage failures exit with code 2.