Connect-azaccount using SP giving an error when running with proxy

[HSV24]

Description

here is the command cx running - Connect-AzAccount -ServicePrincipal -TenantId $TenantId -Credential $Credential -Subscription $subscriptionId -debug

Cx running on a machine (WS 2016) which are behind proxy.
Before running the above command, he is setting the proxy on PS 7.4 as below.

$proxyurl = 'proxyurl:8080'
$proxyuser = 'corpau\accountname'
# $proxyuser = 'accountname'
$proxypassword = 'password'

$proxy_ps7 = "http://$proxyuser" +":"+"$proxypassword"+"@"+"$proxyurl"
$env:HTTP_PROXY=$proxy_ps7
$env:HTTPS_PROXY=$proxy_ps7

It seems token retrieval is successful but it failed with the following error.
Connect-AzAccount: A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond. (management.azure.com:443)

But same command works fine in PS 5.1 on another WS 2016 server behind the same proxy and same version of Az module. here is the sample script for setting proxy on PS 5.1.

$proxyurl = ''
$proxyuser = ''
$proxypassword = $password
$proxysecrepw = ConvertTo-SecureString -String $proxypassword -AsPlainText -Force
$proxycredential = New-Object System.Management.Automation.PSCredential($proxyuser, $proxysecrepw)
$proxy = New-Object System.Net.WebProxy($proxyurl)
$proxy.Credentials = $proxycredential
[System.Net.WebRequest]::defaultWebProxy = $proxy

From the debug log, i noticed the only different is .net version is different in both scenarios.

Please help how to resolve this issue in PS 7.4 with proxy.

Non-working scenario: AzAccountConnect_2.log

Working scenario: goodnode_ps5.1.txt

Script or Debug output

Environment data

PSVersion: 7.4.0

Module versions

Az.Accounts:4.0.1

Error output

[isra-fel]

@dolauli please check out this thanks

[HSV24]

@dolauli and @isra-fel, Any update on this please. Cx waiting for an update. Thanks

[dolauli]

I use ccproxy to create a proxy with authentication. It seems to work as expected.

Following is what I execute in my local machine. And PowerShell version is 7.5.

$env:HTTP_PROXY="http://test:password@127.0.0.1:808"
$env:HTTPS_PROXY="http://test:password@127.0.0.1:808"
connect-azaccount -Debug

[HSV24]

@dolauli Thank you for your response. Cx tried in PS 7.5 as well, received the same error. Atatched the debug log from PS 7.5.

PS75_AZconnectErr.txt

And here cx using connect-azaccount with servicepricnipal as,
Connect-AzAccount -ServicePrincipal -TenantId $TenantId -Credential $Credential -Subscription $subscriptionId -debug

[dolauli]

@dolauli Thank you for your response. Cx tried in PS 7.5 as well, received the same error. Atatched the debug log from PS 7.5.

PS75_AZconnectErr.txt

And here cx using connect-azaccount with servicepricnipal as, Connect-AzAccount -ServicePrincipal -TenantId $TenantId -Credential $Credential -Subscription $subscriptionId -debug

It also works for me for Connect-AzAccount -ServicePrincipal -TenantId $TenantId -Credential $Credential -Subscription $subscriptionId -debug when I use the proxy with credential created with ccproxy.

[HSV24]

@dolauli, Thank you for the confirmation. So it should work even not using CCProxy as long as credentials are valid, right? In this case, cx have their own proxy which works fine for all other traffic except for PS. And credentials also correct.

We would like to understand why cx getting the below error during connect-azaccount. You can see the same error in the attached debug file.

PS75_AZconnectErr.txt

Connect-AzAccount: A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond. (management.azure.com:443)