Skip to content

Commit e63d51e

Browse files
Merge pull request #228438 from YashikaTyagii/patch-36
(AzureCXP) fixes MicrosoftDocs/azure-docs#105462
2 parents b1da528 + 061826b commit e63d51e

File tree

1 file changed

+3
-3
lines changed

1 file changed

+3
-3
lines changed

articles/active-directory/develop/workload-identity-federation-create-trust.md

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -431,7 +431,7 @@ The Microsoft Graph endpoint (`https://graph.microsoft.com`) exposes REST APIs t
431431
Run the following method to [create a new federated identity credential](/graph/api/application-post-federatedidentitycredentials) on your app (specified by the object ID of the app). The *issuer* identifies GitHub as the external token issuer. *subject* identifies the GitHub organization, repo, and environment for your GitHub Actions workflow. When the GitHub Actions workflow requests Microsoft identity platform to exchange a GitHub token for an access token, the values in the federated identity credential are checked against the provided GitHub token.
432432

433433
```azurecli
434-
az rest --method POST --uri 'https://graph.microsoft.com/applications/f6475511-fd81-4965-a00e-41e7792b7b9c/federatedIdentityCredentials' --body '{"name":"Testing","issuer":"https://token.actions.githubusercontent.com/","subject":"repo:octo-org/octo-repo:environment:Production","description":"Testing","audiences":["api://AzureADTokenExchange"]}'
434+
az rest --method POST --uri 'https://graph.microsoft.com/applications/f6475511-fd81-4965-a00e-41e7792b7b9c/federatedIdentityCredentials' --body '{"name":"Testing","issuer":"https://token.actions.githubusercontent.com","subject":"repo:octo-org/octo-repo:environment:Production","description":"Testing","audiences":["api://AzureADTokenExchange"]}'
435435
```
436436

437437
And you get the response:
@@ -443,15 +443,15 @@ And you get the response:
443443
],
444444
"description": "Testing",
445445
"id": "1aa3e6a7-464c-4cd2-88d3-90db98132755",
446-
"issuer": "https://token.actions.githubusercontent.com/",
446+
"issuer": "https://token.actions.githubusercontent.com",
447447
"name": "Testing",
448448
"subject": "repo:octo-org/octo-repo:environment:Production"
449449
}
450450
```
451451

452452
*name*: The name of your Azure application.
453453

454-
*issuer*: The path to the GitHub OIDC provider: `https://token.actions.githubusercontent.com/`. This issuer will become trusted by your Azure application.
454+
*issuer*: The path to the GitHub OIDC provider: `https://token.actions.githubusercontent.com`. This issuer will become trusted by your Azure application.
455455

456456
*subject*: Before Azure will grant an access token, the request must match the conditions defined here.
457457
- For Jobs tied to an environment: `repo:< Organization/Repository >:environment:< Name >`

0 commit comments

Comments
 (0)