Introduction to Azure DevOps Workload identity federation (OIDC) with Terraform
Sep 11, 2023Jared Holgate
Summary
This post details the configuration and usage of Workload Identity Federation (OIDC) with Terraform in Azure DevOps. It explains why to use it, how it works by establishing a trust between Azure DevOps and an Azure service principal using OpenID Connect, and how to configure it using the Azure DevOps Terraform provider. It also shows how to use it in an Azure DevOps Pipeline with the Terraform task, highlighting that the implementation is abstracted away into the choice of Service Connection type.
More from the Azure DevOps Workload Identity Federation with Terraform trail
- Retirement of Azure DevOps issuer in Workload identity federation service connections
- Introducing Azure DevOps ID Token Refresh and Terraform Task Version 5
- Workload identity federation for Azure deployments is now generally available
- Managed identity and service principal support for Azure DevOps now in General Availability (GA)
- Public preview of Workload identity federation for Azure Pipelines