Skip to content

Commit 1a23b13

Browse files
Merge pull request #303008 from mattchenderson/patch-12
Removing preview label from Entra doc link
2 parents 1d37f4c + fb18c5d commit 1a23b13

File tree

1 file changed

+2
-1
lines changed

1 file changed

+2
-1
lines changed

articles/app-service/configure-authentication-provider-aad.md

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -301,7 +301,7 @@ Requests that fail these built-in checks get an HTTP `403 Forbidden` response.
301301

302302
[fic-config]: #use-a-managed-identity-instead-of-a-secret-preview
303303

304-
Instead of configuring a client secret for your app registration, you can [configure an application to trust a managed identity (preview)][entra-fic]. Using an identity instead of a secret means you don't have to manage a secret. You don't have secret expiration events to handle, and you don't have the same level of risk associated with possibly disclosing or leaking that secret.
304+
Instead of configuring a client secret for your app registration, you can [configure an application to trust a managed identity][entra-fic]. Using an identity instead of a secret means you don't have to manage a secret. You don't have secret expiration events to handle, and you don't have the same level of risk associated with possibly disclosing or leaking that secret.
305305

306306
The identity allows you to create a *federated identity credential*, which can be used instead of a client secret as a *client assertion*. This approach is available only for workforce configurations. The built-in authentication feature currently supports federated identity credentials as a preview.
307307

@@ -313,6 +313,7 @@ You can use the steps in this section to configure your App Service or Azure Fun
313313

314314
> [!IMPORTANT]
315315
> The user-assigned managed identity that you create should only be assigned to the App Service or Azure Functions application through this registration. If you assign the identity to another resource, you're giving that resource unnecessary access to your app registration.
316+
316317
1. Note down the **Object ID** and **Client ID** values of the managed identity. You'll need the object ID to create a federated identity credential in the next step. You'll use the managed identity's client ID in a later step.
317318

318319
1. Follow the Microsoft Entra ID [instructions to configure a federated identity credential on an existing application](/entra/workload-id/workload-identity-federation-config-app-trust-managed-identity#configure-a-federated-identity-credential-on-an-existing-application). Those instructions also include sections for updating application code, which you can skip.

0 commit comments

Comments
 (0)