managed_identity_kv_startup.cs

public static IWebHostBuilder CreateWebHostBuilder(string[] args) =>
           WebHost.CreateDefaultBuilder(args)
               .ConfigureAppConfiguration((context, config) =>
               {
                   var builtConfig = config.Build();
                   var userAssignedId = builtConfig["UserAssignedId"];

                   AzureServiceTokenProvider azureServiceTokenProvider;

                   if (string.IsNullOrEmpty(userAssignedId))
                   {
                       azureServiceTokenProvider = new AzureServiceTokenProvider();
                   }
                   else
                   {
                       azureServiceTokenProvider = new AzureServiceTokenProvider($"RunAs=App;AppId={userAssignedId}");
                   }

                   var keyVaultClient = new KeyVaultClient(
                       new KeyVaultClient.AuthenticationCallback(
                           azureServiceTokenProvider.KeyVaultTokenCallback));

                   config.AddAzureKeyVault(
                       $"https://{builtConfig["KeyVaultName"]}.vault.azure.net/",
                       keyVaultClient,
                       new DefaultKeyVaultSecretManager());
               })
               .UseStartup<Startup>();
    }