az workload identity in azure devops pipeline for az cli or script task

[Veljen]

I can use kubernetes, kubectl task in azuredevops referring service principal to get the necessary federated_token and other env to connect the aks. but with az cli command how to get the federated_token_id or AZURE_FEDERATED_TOKEN_FILE and i need to use this in azure pipeline for the az cli or script task.

kubelogin --login workloadidentity expects federated_toke_file and how to get this using az cli from the azure devops ?

[Veljen]

can one clarify how to get the federated_token_file using az cli or kubelogin using azure devops service connnection (shell script task or az cli task) ?