Support Kafka Receiver (for Event Hubs) with Azure AD / Managed Identity authentication

[borism-zenity]

Hi,
I’m trying to use the the kafkareceiver to read from Azure Event Hubs (via its Kafka endpoint), but I’d like to authenticate without using a connection string (SAS key). Instead, I want to use Azure AD / Managed Identity (or workload identity in Kubernetes) to acquire access tokens and present those to Event Hubs using OAuth (e.g. OAUTHBEARER in Kafka).

I looked through the repository (especially under receiver/kafkareceiver) but I didn’t find any existing configuration or support for specifying a token provider, credential, or Azure authentication in the context of the Kafka receiver.

Is there some way to achieve this? If not, are there existing plans or related discussions already underway for this kind of feature (e.g. a generic auth extension for Azure components)?