Why reusable workflow step fails from a different repo but succeeds from same repo?

I am using GitHub Actions for CI/CD. I have a reusable workflow added in a repo named BuildTemplate so that future projects can use this template. The reusable workflow has a simple step to log in to Azure and subsequently download a file from key vault. The secrets for Azure login are all kept under BuildTemplate repo's settings -> secrets and variables -> actions -> repository secrets.

  jobs:
    download_secure_file:
     runs-on: [self-hosted, github-my-selfhosted-runner]
     steps:
      - name: Login to Azure
        uses: Azure/login@v1
        with:
          client-id: ${{ secrets.AZURE_CLIENT_ID }}
          tenant-id: ${{ secrets.AZURE_TENANT_ID }}
          subscription-id: ${{ secrets.AZURE_SUBSCRIPTION_ID }}

When this reusable workflow step is being called from a different repo, like this:

    jobs:
      download_secure_file:
        name: Download Secure File
        uses: MyOrg/MyReusableRepo/.github/workflows/template-download-secure-file.yml@main

the step fails with the below error:

Run Azure/login@v1
Error: Az CLI Login failed. Please check the credentials and make sure az is installed on the runner. For more information refer https://aka.ms/create-secrets-for-GitHub-workflows

When this login step is in a reusable workflow which is in the same repo, it works:

Run Azure/login@v1
Using OIDC authentication...
Federated token details: 
 issuer - https://token.actions.githubusercontent.com 
 subject claim - repo:MyOrg/MyRepo:ref:refs/heads/feature/MyFeature-7596
/usr/bin/az cloud set -n azurecloud
Done setting cloud: "azurecloud"
Login successful.

Why does the login fail when the reusable workflow is called from a different repo? I went through GitHub Actions documentation and did not see anything that I am missing here such that the reusable workflow fails. Please note even though the error shows "make sure az is installed on the runner", it is not needed as it is the same runner machine where this step succeeds without having the need to install Azure CLI.

What is the actual issue here?

You're almost there... All you have to do is pass secrets from the calling workflow otherwise secrets are null hence your job is getting failed.

jobs:
  download_secure_file:
    name: Download Secure File
    uses: MyOrg/MyReusableRepo/.github/workflows/template-download-secure-file.yml@main
    secrets: inherit

while specifying secrets: inherit , you can solve the issue.