Public preview of Workload identity federation for Azure Pipelines
Sep 11, 2023Eric van Wijk

Summary
This post announces the public preview of workload identity federation for Azure service connections, which uses OpenID Connect (OIDC) to simplify authentication between Azure Pipelines and Azure. It eliminates the need to manage expiring secrets and improves security by using a federation subject. The post details how to convert existing service connections or create new ones using this scheme, and lists updated built-in Azure Pipelines tasks that support it. It also provides guidance for custom tasks and extensions, including Terraform integration.
More from the Azure DevOps Workload Identity Federation with Terraform trail
- Retirement of Azure DevOps issuer in Workload identity federation service connections
- Introducing Azure DevOps ID Token Refresh and Terraform Task Version 5
- Workload identity federation for Azure deployments is now generally available
- Managed identity and service principal support for Azure DevOps now in General Availability (GA)
- Introduction to Azure DevOps Workload identity federation (OIDC) with Terraform