git-ecosystem / git-ecosystem/git-credential-manager
Support Workload Identity Federation for Azure DevOps
Open
@mr-otmarg is already working on this.
Since Nov 12, 2025.
enhancement
host:azure-repos
- Dominant language
- C#
- Stars
- 9.3k
- Forks
- 2.9k
- Avg merge
- 7d 1h
- Merged PRs (30d)
- 14
Description
Feature description
Workload Identity Federation allows us to access an Azure DevOps instance that is connected to an Entra tenant (tenant A) that is not the one our VM is running in (tenant B). This is increasingly common in isolated production tenants.
Currently the only solution for this scenario is a PAT (or SP/Secret), but as we push for credential-less auth, WIF would be more valuable.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.