AKS cluster authentication requires more than just a kubeconfig. Prerequisites To access resources that are secured by a Microsoft Entra tenant, the entity that requires access must be represented by a security principal. This requirement is true for both users (user principal) and applications (service principal).