Check browser telemetry before disabling local Application Insights authentication

Source facts

Microsoft lists the Application Insights JavaScript SDK among the unsupported scenarios for Microsoft Entra authentication. The same guidance describes disabling local authentication so the resource accepts telemetry authenticated with managed identities or Microsoft Entra ID. Those two facts require a client-by-client migration review. Microsoft Learn.

Applicability

Use this review for an Application Insights resource that receives browser JavaScript telemetry as well as other application data. Identify every sending client and its instrumentation method before changing the resource’s authentication policy. Do not assume that a working server-side identity validates the browser path.

DSE recommendation

DSE recommends documenting a supported ingestion plan for each client before disabling local authentication. Have the application owner explain how required browser observations will remain available. Test the complete plan in an isolated resource and retain the previous configuration. Do not add credentials to browser code to imitate a server-side authentication pattern.

Verification

Generate approved browser and server interactions and inspect their telemetry separately in the intended test resource. Compare the client inventory with the records that arrive under the proposed authentication settings. Hold the production change if a required client has no verified supported path. Preserve the tested SDK versions and per-client results with the migration decision.

Official references

Microsoft Learn: Microsoft Entra Authentication for Application Insights.