diff --git a/ci-operator/step-registry/idp/external-oidc/entraid/console-app/redirect-uri/add/idp-external-oidc-entraid-console-app-redirect-uri-add-commands.sh b/ci-operator/step-registry/idp/external-oidc/entraid/console-app/redirect-uri/add/idp-external-oidc-entraid-console-app-redirect-uri-add-commands.sh
index b42fc49c1f3fd..31e6dd9089c1b 100644
--- a/ci-operator/step-registry/idp/external-oidc/entraid/console-app/redirect-uri/add/idp-external-oidc-entraid-console-app-redirect-uri-add-commands.sh
+++ b/ci-operator/step-registry/idp/external-oidc/entraid/console-app/redirect-uri/add/idp-external-oidc-entraid-console-app-redirect-uri-add-commands.sh
@@ -34,10 +34,15 @@ CONSOLE_REDIRECT_URIS="$(az ad app show --id "$CONSOLE_CLIENT_ID" --query 'web.r
 LOCK_ACCOUNT_NAME="$(</var/run/hypershift-azure-lock-blob/account-name)"
 LOCK_BLOB_NAME="$(</var/run/hypershift-azure-lock-blob/blob-name)"
 LOCK_CONTAINER_NAME="$(</var/run/hypershift-azure-lock-blob/container-name)"
-while ! az storage blob lease acquire --container-name "$LOCK_CONTAINER_NAME" --blob-name "$LOCK_BLOB_NAME" --account-name "$LOCK_ACCOUNT_NAME" --lease-duration 15 --auth-mode login; do
+
+set +x
+LOCK_ACCOUNT_KEY="$(az storage account keys list --account-name "$LOCK_ACCOUNT_NAME" --query "[0].value" -o tsv)"
+
+while ! az storage blob lease acquire --container-name "$LOCK_CONTAINER_NAME" --blob-name "$LOCK_BLOB_NAME" --account-name "$LOCK_ACCOUNT_NAME" --account-key "$LOCK_ACCOUNT_KEY" --lease-duration 15; do
     echo "Waiting for lease"
     sleep 60
 done
+set -x
 
 eval "az ad app update --id $CONSOLE_CLIENT_ID --web-redirect-uris $CONSOLE_REDIRECT_URIS $CONSOLE_CALLBACK_URI"
 az ad app show --id "$CONSOLE_CLIENT_ID" --query 'web.redirectUris' -o tsv
diff --git a/ci-operator/step-registry/idp/external-oidc/entraid/console-app/redirect-uri/remove/idp-external-oidc-entraid-console-app-redirect-uri-remove-commands.sh b/ci-operator/step-registry/idp/external-oidc/entraid/console-app/redirect-uri/remove/idp-external-oidc-entraid-console-app-redirect-uri-remove-commands.sh
index fe140986d475f..d911f6edb5347 100644
--- a/ci-operator/step-registry/idp/external-oidc/entraid/console-app/redirect-uri/remove/idp-external-oidc-entraid-console-app-redirect-uri-remove-commands.sh
+++ b/ci-operator/step-registry/idp/external-oidc/entraid/console-app/redirect-uri/remove/idp-external-oidc-entraid-console-app-redirect-uri-remove-commands.sh
@@ -38,10 +38,15 @@ CONSOLE_REDIRECT_URIS_NEW="$(echo "$CONSOLE_REDIRECT_URIS" | grep -v "$CONSOLE_C
 LOCK_ACCOUNT_NAME="$(</var/run/hypershift-azure-lock-blob/account-name)"
 LOCK_BLOB_NAME="$(</var/run/hypershift-azure-lock-blob/blob-name)"
 LOCK_CONTAINER_NAME="$(</var/run/hypershift-azure-lock-blob/container-name)"
-while ! az storage blob lease acquire --container-name "$LOCK_CONTAINER_NAME" --blob-name "$LOCK_BLOB_NAME" --account-name "$LOCK_ACCOUNT_NAME" --lease-duration 15 --auth-mode login; do
+
+set +x
+LOCK_ACCOUNT_KEY="$(az storage account keys list --account-name "$LOCK_ACCOUNT_NAME" --query "[0].value" -o tsv)"
+
+while ! az storage blob lease acquire --container-name "$LOCK_CONTAINER_NAME" --blob-name "$LOCK_BLOB_NAME" --account-name "$LOCK_ACCOUNT_NAME" --account-key "$LOCK_ACCOUNT_KEY" --lease-duration 15; do
     echo "Waiting for lease"
     sleep 60
 done
+set -x
 
 eval "az ad app update --id $CONSOLE_CLIENT_ID --web-redirect-uris $CONSOLE_REDIRECT_URIS_NEW"
 az ad app show --id "$CONSOLE_CLIENT_ID" --query 'web.redirectUris' -o tsv