# Authenticate with Azure Blob Storage using SAS tokens

> AzureBlobConfig now supports Shared Access Signature (SAS) token authentication as an alternative to connection strings and service principal credentials.

- Published: 2026-04-02
- Author: Agno Team
- Category: Changelog
- Canonical: https://agno-com-nine.vercel.app/articles/authenticate-with-azure-blob-storage-using-sas-tokens
- Markdown: https://agno-com-nine.vercel.app/articles/authenticate-with-azure-blob-storage-using-sas-tokens.md

`AzureBlobConfig` now supports Shared Access Signature (SAS) token authentication as an alternative to connection strings and service principal credentials. This makes it easier to grant time-scoped, permission-limited access to Azure Blob Storage without exposing full account credentials, which is useful for automated pipelines, temporary access grants, and least-privilege storage configurations.

Details**:**

- Pass a SAS token directly to `AzureBlobConfig` alongside the account URL
- Complements existing authentication paths; no migration required for configurations already using connection strings or service principal auth

See the [Azure Blob Storage Content Source for Knowledge docs](https://docs.agno.com/examples/knowledge/cloud/azure-blob#azure-blob-storage-content-source-for-knowledge) for more.