use DefaultAzureCredential instead of AzureCliCredential (#3860)

dotnet/samples/GettingStarted/Workflows/Declarative/CustomerSupport/Program.cs

@@ -61,7 +61,10 @@ internal sealed class Program
 
     private static async Task CreateAgentsAsync(Uri foundryEndpoint, IConfiguration configuration, TicketingPlugin plugin)
     {
-        AIProjectClient aiProjectClient = new(foundryEndpoint, new AzureCliCredential());
+        // WARNING: DefaultAzureCredential is convenient for development but requires careful consideration in production.
+        // In production, consider using a specific credential (e.g., ManagedIdentityCredential) to avoid
+        // latency issues, unintended credential probing, and potential security risks from fallback mechanisms.
+        AIProjectClient aiProjectClient = new(foundryEndpoint, new DefaultAzureCredential());
 
         await aiProjectClient.CreateAgentAsync(
             agentName: "SelfServiceAgent",

dotnet/samples/GettingStarted/Workflows/Declarative/DeepResearch/Program.cs

@@ -47,7 +47,10 @@ internal sealed class Program
 
     private static async Task CreateAgentsAsync(Uri foundryEndpoint, IConfiguration configuration)
     {
-        AIProjectClient aiProjectClient = new(foundryEndpoint, new AzureCliCredential());
+        // WARNING: DefaultAzureCredential is convenient for development but requires careful consideration in production.
+        // In production, consider using a specific credential (e.g., ManagedIdentityCredential) to avoid
+        // latency issues, unintended credential probing, and potential security risks from fallback mechanisms.
+        AIProjectClient aiProjectClient = new(foundryEndpoint, new DefaultAzureCredential());
 
         await aiProjectClient.CreateAgentAsync(
             agentName: "ResearchAgent",

dotnet/samples/GettingStarted/Workflows/Declarative/ExecuteCode/Program.cs

@@ -47,9 +47,12 @@ internal sealed class Program
 
     private Workflow CreateWorkflow()
     {
+        // WARNING: DefaultAzureCredential is convenient for development but requires careful consideration in production.
+        // In production, consider using a specific credential (e.g., ManagedIdentityCredential) to avoid
+        // latency issues, unintended credential probing, and potential security risks from fallback mechanisms.
         // Use DeclarativeWorkflowBuilder to build a workflow based on a YAML file.
         DeclarativeWorkflowOptions options =
-            new(new AzureAgentProvider(new Uri(this.FoundryEndpoint), new AzureCliCredential()))
+            new(new AzureAgentProvider(new Uri(this.FoundryEndpoint), new DefaultAzureCredential()))
             {
                 Configuration = this.Configuration
             };

dotnet/samples/GettingStarted/Workflows/Declarative/ExecuteWorkflow/Program.cs

@@ -71,8 +71,11 @@ internal sealed class Program
     /// </summary>
     private Workflow CreateWorkflow()
     {
+        // WARNING: DefaultAzureCredential is convenient for development but requires careful consideration in production.
+        // In production, consider using a specific credential (e.g., ManagedIdentityCredential) to avoid
+        // latency issues, unintended credential probing, and potential security risks from fallback mechanisms.
         // Create the agent provider that will service agent requests within the workflow.
-        AzureAgentProvider agentProvider = new(new Uri(this.FoundryEndpoint), new AzureCliCredential())
+        AzureAgentProvider agentProvider = new(new Uri(this.FoundryEndpoint), new DefaultAzureCredential())
         {
             // Functions included here will be auto-executed by the framework.
             Functions = this.Functions

dotnet/samples/GettingStarted/Workflows/Declarative/FunctionTools/Program.cs

@@ -56,7 +56,10 @@ internal sealed class Program
 
     private static async Task CreateAgentAsync(Uri foundryEndpoint, IConfiguration configuration, AIFunction[] functions)
     {
-        AIProjectClient aiProjectClient = new(foundryEndpoint, new AzureCliCredential());
+        // WARNING: DefaultAzureCredential is convenient for development but requires careful consideration in production.
+        // In production, consider using a specific credential (e.g., ManagedIdentityCredential) to avoid
+        // latency issues, unintended credential probing, and potential security risks from fallback mechanisms.
+        AIProjectClient aiProjectClient = new(foundryEndpoint, new DefaultAzureCredential());
 
         await aiProjectClient.CreateAgentAsync(
             agentName: "MenuAgent",

dotnet/samples/GettingStarted/Workflows/Declarative/HostedWorkflow/Program.cs

@@ -34,8 +34,11 @@ internal sealed class Program
         IConfiguration configuration = Application.InitializeConfig();
         Uri foundryEndpoint = new(configuration.GetValue(Application.Settings.FoundryEndpoint));
 
+        // WARNING: DefaultAzureCredential is convenient for development but requires careful consideration in production.
+        // In production, consider using a specific credential (e.g., ManagedIdentityCredential) to avoid
+        // latency issues, unintended credential probing, and potential security risks from fallback mechanisms.
         // Create the agent service client
-        AIProjectClient aiProjectClient = new(foundryEndpoint, new AzureCliCredential());
+        AIProjectClient aiProjectClient = new(foundryEndpoint, new DefaultAzureCredential());
 
         // Ensure sample agents exist in Foundry.
         await CreateAgentsAsync(aiProjectClient, configuration);

dotnet/samples/GettingStarted/Workflows/Declarative/InputArguments/Program.cs

@@ -47,7 +47,10 @@ internal sealed class Program
 
     private static async Task CreateAgentAsync(Uri foundryEndpoint, IConfiguration configuration)
     {
-        AIProjectClient aiProjectClient = new(foundryEndpoint, new AzureCliCredential());
+        // WARNING: DefaultAzureCredential is convenient for development but requires careful consideration in production.
+        // In production, consider using a specific credential (e.g., ManagedIdentityCredential) to avoid
+        // latency issues, unintended credential probing, and potential security risks from fallback mechanisms.
+        AIProjectClient aiProjectClient = new(foundryEndpoint, new DefaultAzureCredential());
 
         await aiProjectClient.CreateAgentAsync(
             agentName: "LocationTriageAgent",

dotnet/samples/GettingStarted/Workflows/Declarative/Marketing/Program.cs

@@ -46,7 +46,10 @@ internal sealed class Program
 
     private static async Task CreateAgentsAsync(Uri foundryEndpoint, IConfiguration configuration)
     {
-        AIProjectClient aiProjectClient = new(foundryEndpoint, new AzureCliCredential());
+        // WARNING: DefaultAzureCredential is convenient for development but requires careful consideration in production.
+        // In production, consider using a specific credential (e.g., ManagedIdentityCredential) to avoid
+        // latency issues, unintended credential probing, and potential security risks from fallback mechanisms.
+        AIProjectClient aiProjectClient = new(foundryEndpoint, new DefaultAzureCredential());
 
         await aiProjectClient.CreateAgentAsync(
             agentName: "AnalystAgent",

dotnet/samples/GettingStarted/Workflows/Declarative/StudentTeacher/Program.cs

@@ -46,7 +46,10 @@ internal sealed class Program
 
     private static async Task CreateAgentsAsync(Uri foundryEndpoint, IConfiguration configuration)
     {
-        AIProjectClient aiProjectClient = new(foundryEndpoint, new AzureCliCredential());
+        // WARNING: DefaultAzureCredential is convenient for development but requires careful consideration in production.
+        // In production, consider using a specific credential (e.g., ManagedIdentityCredential) to avoid
+        // latency issues, unintended credential probing, and potential security risks from fallback mechanisms.
+        AIProjectClient aiProjectClient = new(foundryEndpoint, new DefaultAzureCredential());
 
         await aiProjectClient.CreateAgentAsync(
             agentName: "StudentAgent",

dotnet/samples/GettingStarted/Workflows/Declarative/ToolApproval/Program.cs

@@ -47,7 +47,10 @@ internal sealed class Program
 
     private static async Task CreateAgentAsync(Uri foundryEndpoint, IConfiguration configuration)
     {
-        AIProjectClient aiProjectClient = new(foundryEndpoint, new AzureCliCredential());
+        // WARNING: DefaultAzureCredential is convenient for development but requires careful consideration in production.
+        // In production, consider using a specific credential (e.g., ManagedIdentityCredential) to avoid
+        // latency issues, unintended credential probing, and potential security risks from fallback mechanisms.
+        AIProjectClient aiProjectClient = new(foundryEndpoint, new DefaultAzureCredential());
 
         await aiProjectClient.CreateAgentAsync(
             agentName: "DocumentSearchAgent",