diff --git a/sdk/keyvault/azure-keyvault-secrets/azure/keyvault/secrets/_shared/client_base.py b/sdk/keyvault/azure-keyvault-secrets/azure/keyvault/secrets/_shared/client_base.py
index e03e81b083b1..f376d870f816 100644
--- a/sdk/keyvault/azure-keyvault-secrets/azure/keyvault/secrets/_shared/client_base.py
+++ b/sdk/keyvault/azure-keyvault-secrets/azure/keyvault/secrets/_shared/client_base.py
@@ -17,8 +17,9 @@
 
 if TYPE_CHECKING:
     # pylint:disable=unused-import,ungrouped-imports
-    from typing import Any
+    from typing import Any, Union
     from azure.core.credentials import TokenCredential
+    from azure.identity import DefaultAzureCredential
 
 
 class ApiVersion(with_metaclass(CaseInsensitiveEnumMeta, str, Enum)):
@@ -37,7 +38,7 @@ class ApiVersion(with_metaclass(CaseInsensitiveEnumMeta, str, Enum)):
 
 class KeyVaultClientBase(object):
     def __init__(self, vault_url, credential, **kwargs):
-        # type: (str, TokenCredential, **Any) -> None
+        # type: (str, Union[TokenCredential,DefaultAzureCredential], **Any) -> None
         if not credential:
             raise ValueError(
                 "credential should be an object supporting the TokenCredential protocol, "