Microsoft · AZ-401 · BETA
Identities and secretless authentication
AZ-401 · Lesson 13 of 18 · 1:49:47
YouTube loads only after you press play. This chapter opens at its timestamp in the full course. Watch on YouTube ↗
In this lesson
Lesson 13 of the free AZ-401 series (domain 4): managed identities and service principals, GitHub authentication (GITHUB_TOKEN, GitHub Apps, personal access tokens), workload identity federation and OIDC in Azure Pipelines and GitHub Actions, and Azure DevOps service connections and personal access tokens. With three quick checks and a recap.
Preview the topics
- A Contoso integration must read and comment on pull requests across forty repositories, without depending on any employee’s account. What should it use?
- A GitHub workflow signs in to Azure with OIDC, but only deployments from the production environment should be trusted. Where is that restriction expressed?
- A nightly job authenticates to Azure DevOps with a personal access token that has full access and never expires. What should Contoso do first?