MicrosoftDocs/entra-docs/docs/workload-id

Workload Flexible Federated Identity Credentials - Update for GitHub on supported claims (#2055) * Update supported claims and add GitHub note Added support for new claims and noted upcoming changes to GitHub's handling of federated credentials. * Apply suggestion from @ShawnKupfer * Simplify note on GitHub immutable format Removed redundant note about GitHub's immutable format application. --------- Co-authored-by: Tim Sherer <28902327+TimShererWithAquent@users.noreply.github.com> Co-authored-by: Shawn Kupfer <60445862+ShawnKupfer@users.noreply.github.com>

Change MS Graph Bicep extension to version 1.0.0 (#2059) Version 1.0.0 of the Microsoft Graph Bicep extension has been released about a year ago and should be used in sample snippets.

Update flexible federated identity credential guidance (#14437) Synchronize the flexible FIC concept and setup articles with the verified Word documents. Add application and managed identity guidance, preserve Learn tab groups, and clarify GitLab mutable-subject matching requirements. Co-authored-by: Ahmed Mohamed <ahmed.m+microsoft@microsoft.com> Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Copilot-Session: 5b0afdd0-248e-42aa-9f90-d93c4049fe7e

Merge branch 'main' into learn-build-service-prodbot/docutune-autopr-20250421-152133-9335369-ignore-build

Changes to use allowed values. Should be an object ID, per the text.

Update GitHub flexible FIC immutable claim guidance (#14131) * Update GitHub flexible FIC immutable claims Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Update flexible FIC setup examples Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> --------- Co-authored-by: Ahmed Mohamed <ahmed.m+microsoft@microsoft.com> Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Replaces two dead personal-blog links on the workload identity federation concept page with first-party tutorials. (#14093) New tutorial: Federate a SPIFFE/SPIRE workload identity with Microsoft Entra ID New tutorial: Federate a Google Cloud workload identity with Microsoft Entra ID Updated workload-identity-federation.md "Supported scenarios" to link the new tutorials instead of the retired blog.identitydigest.com posts Added both tutorials to the Workload ID TOC under How-to guides Content de-personalized from the source blogs, modernized to current Microsoft Entra branding, technically re-verified (RS256, set_key_use, api://AzureADTokenExchange, 20-credential limit), ai-usage: ai-assisted disclosed, and carries the on-brand federation flow diagram.

Add related Flexible FIC links Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Merge pull request #13976 from ahmed-mohamed-msft/docs-editor/workload-identities-federated-1785435916 Update workload-identities-federated-credential-mutable-subjects.md

Learn Editor: Update workload-identities-federated-credential-mutable-subjects.md

Learn Editor: Update workload-identities-github-immutable-subjects.md

Learn Editor: Update workload-identities-federated-credential-mutable-subjects.md

Add workload identity immutable subject articles (#13956) * Add workload identity immutable subject articles Add two articles on federated identity credential subject recycling: - Concept: Mutable subjects in federated identity credentials - How-to: Migrate GitHub Actions federated credentials to immutable subjects Wire both into docs/workload-id/TOC.yml. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Apply author/ms.author metadata via code review Co-authored-by: Marsh Macy <253514592+mmacy-msft@users.noreply.github.com> --------- Co-authored-by: Ahmed Mohamed <ahmed.m+microsoft@microsoft.com> Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Co-authored-by: Marsh Macy <253514592+mmacy-msft@users.noreply.github.com>

Update workload-identity-federation.md Adding AWS

[BULK UPDATE] User Story 573314: Ensure every doc in MSec repos has an author from MSec Docs (entra-docs-pr 9) (#13413) * [BULK UPDATE] User Story 573314: Ensure every doc in MSec repos has an author from MSec Docs (entra-docs-pr 9) * Remove from individual files

Incorporate feedback to remove blueprints from workload identities overview

Agentic Governance test 02

Updates metadata info after re-org.

[BULK UPDATE] Metadata: Move author/ms.author/manager/ms.service/ms.subservice to folder level (1/5) Folders: agent-id, fundamentals, security-copilot, workload-id Changes to docfx.json: - author/ms.author: Added folder entries for agent-id, fundamentals, security-copilot, workload-id - ms.service: Added agent-id=entra-id, fundamentals=entra, workload-id=entra-workload-id - ms.subservice: Added fundamentals=fundamentals - manager: Added security-copilot=pmwongera, updated workload-id to CelesteDG - globalMetadata: Added default author/ms.author (kenwith) Stripped matching values from individual files. Files with different values retain overrides. Part 1 of 5 - split from PR #11515 for smaller review scope. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Fix typo in workload identity federation description