menu
techminis

A naukri.com initiative

google-web-stories
Home

>

Devops News

>

Introducin...
source image

Microsoft

2w

read

224

img
dot

Image Credit: Microsoft

Introducing Azure DevOps ID Token Refresh and Terraform Task Version 5

  • The recent updates introduced improve Workload identity federation (OpenID Connect) experience with Azure DevOps and Terraform on Microsoft Azure.
  • ID Token Refresh allows requesting a new ID Token and exchanging it for an access token when the previous token has expired.
  • Errors like AADSTS700024 occur when a token times out without ID Token Refresh.
  • Terraform providers (azurerm, azapi, azuread) and azurerm backend were updated to support ID Token Refresh.
  • Microsoft DevLabs Terraform Task Version 5 now supports ID Token Refresh by default.
  • Configuring ID Token Refresh involves setting environment variables like ARM_OIDC_AZURE_SERVICE_CONNECTION_ID, ARM_OIDC_REQUEST_URL, and ARM_OIDC_REQUEST_TOKEN.
  • The article provides examples of configuring ID Token Refresh with Azure CLI task and Terraform Tasks.
  • Feedback is encouraged, and further improvements to reduce the number of required environment variables are being worked on.
  • Acknowledgments are given to the teams and individuals involved in updating the providers, backend, and tasks for ID Token Refresh support.
  • The updates are aimed at enhancing the Azure DevOps and Terraform experience, ensuring smoother authentication and access token management.

Read Full Article

like

13 Likes

For uninterrupted reading, download the app