Jaliya Udagedara • 6/18/2026

Using Microsoft Entra ID Workload Identity Federation (WIF) to Deploy from GitHub Actions to Azure

This article explains how to set up Microsoft Entra ID Workload Identity Federation (WIF) to deploy from GitHub Actions to Azure without storing any long-lived secrets. It covers creating a federated credential for an Entra ID app registration, configuring the subject to scope trust to specific branches or environments, and updating GitHub Actions workflows to use OIDC token authentication instead of traditional service principal secrets. The approach eliminates secret rotation and leakage risks by using short-lived tokens issued by GitHub and validated by Azure.

0 comments

#Github Actions #Azure #Oidc