Check the SDK path before enabling Entra authentication for Snapshot Debugger

Source facts

Microsoft states that Snapshot Debugger supports Microsoft Entra authentication only when the application references the Application Insights SDK and configures Microsoft Entra ID through that SDK. The source describes this as the current authentication condition for snapshot ingestion. Microsoft Learn.

Applicability

Use this review for an App Service application whose team plans to authenticate snapshot ingestion with Microsoft Entra ID. Identify the application’s actual SDK references and authentication configuration. A portal setting or the application’s own user sign-in does not by itself demonstrate this ingestion setup.

DSE recommendation

DSE recommends having the application owner document the SDK integration before changing the snapshot agent settings. Compare the current source’s complete setup instructions with the deployed application, identity and target Application Insights resource. Stage the change in an approved test deployment and define a safe exception scenario that can produce reviewable evidence.

Verification

Inspect the deployed SDK and identity configuration, then run the approved snapshot exercise. Confirm that a snapshot reaches the intended resource and can be associated with the intended exception. Keep authorization evidence separate from evidence that a snapshot was actually collected. If no snapshot arrives, investigate both paths rather than assuming application sign-in proved ingestion authentication.

Official references

Microsoft Learn: Enable Snapshot Debugger for .NET apps in App Service.