Extend GCM OAuth/WAM Default Beyond Dev Box to All Entra ID–Joined Environments

[hanagaraj]

This is a dependency ask from the AEP DevProd AI team on GCM. The ask is to see certain config defaults set more broadly. For instance, in Dev Box environments, GCM currently defaults to OAuth with WAM broker. We'd like this to extend to other environments too where the windows login is an entra id-joined work/school account (or some similar check, the purpose being to prioritize oauth/WAM wherever available.

[almasi0]

Hello AEP DevProd AI Team,

Thank you for opening this important issue. I have carefully reviewed your request and fully understand the need to extend the default configuration settings for Git Credential Manager (GCM) to include Entra ID-joined environments, prioritizing OAuth/WAM wherever available.

I agree that this extension will significantly improve the authentication experience for users in these environments, providing a consistent and secure single sign-on (SSO) experience.

To ensure the best possible implementation, I would like to ask some clarifying questions:

1.	Are there any specific use case scenarios or edge cases that we should consider when extending this behavior? For example, are there any particular Entra ID-joined configurations that might affect how GCM interacts with the WAM Broker?
2.	Do you anticipate any potential compatibility challenges with older versions of Windows or Entra ID environments?
3.	Do you have any specific preferences on how GCM should detect an Entra ID-joined environment? Should it rely on specific device or user properties?

Based on my initial understanding, I believe the solution might involve

•	Modifying GCM’s environment detection logic to determine if the device is Entra ID-joined.
•	Updating GCM’s default settings to automatically enable OAuth/WAM in these environments.
•	Potentially providing new configuration options for administrators to adjust this behavior if necessary.

I'm ready to contribute to this effort, whether through research and compatibility verification, or by assisting in the development and testing of the solution. Please let me know how I can best assist.

Thank you again for raising this issue.

Sincerely,
[AlMasi]