Sits on top of OAuth 2.0 to handle user sign-in. It also underpins workload identity federation, through which GitHub Actions gets Azure tokens without keeping any secret.
Read more: Microsoft Learn
In the Ultra Transcenders books
Each book explains OpenID Connect in context, with comparison tables and the common traps.
Terms in this definition
- OAuth 2.0
Standard authorisation protocol through which the Microsoft identity platform hands apps access tokens. In the client credentials flow, an app exchanges its client ID and client secret for a token.
- Chat message roles
Labels on chat messages: instructions go under system, the person's input under user, the model's previous answers under assistant, and results returned by a called tool under tool (or function).
- Federated identity credential
Lets an outside workload, GitHub Actions or Kubernetes for instance, obtain an Entra token in exchange for its own token, so no secret has to be stored.
- GitHub Actions
Event-driven workflow automation in GitHub, started by things like a push or pull request. Typical uses include deploying Bicep or CLI templates and launching Azure Machine Learning jobs with no manual step.
- Secret
Object in Key Vault storing an arbitrary string value, for instance a password, API key or connection string.