Skip to content
OIDC Issuers
Microsoft Azure

Microsoft Azure

Entra ID (formerly Azure AD).

Workload Identity / App tokens (v2.0)

FieldValue
Issuerhttps://login.microsoftonline.com/<TENANT_ID>/v2.0
Discoveryhttps://login.microsoftonline.com/<TENANT_ID>/v2.0/.well-known/openid-configuration
jwks_uri hostlogin.microsoftonline.com (same as issuer)
Override neededNo
oidc:
  allowed_issuers:
    - https://login.microsoftonline.com/00000000-0000-0000-0000-000000000000/v2.0

Azure DevOps Pipelines (workload identity federation)

FieldValue
Issuerhttps://vstoken.dev.azure.com/<ORGANIZATION_ID>
Override neededNo
GitHub Actions