Switch ESRP service connection to wif2 for fix ADO npm publish - #155
Merged
jpablo2002 merged 2 commits intoJul 28, 2026
Merged
Conversation
klvnraju
previously approved these changes
Jul 27, 2026
…read pool starvation hangs on CI
klvnraju
approved these changes
Jul 27, 2026
adamasmar
approved these changes
Jul 27, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
4 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
The ADO agent pool upgraded from v4 to v5, which changed the OIDC token format for workload identity federation. This broke the ESRP npm publish step with
AADSTS700213: No matching federated identity record found.The wif2 service connection was already created and the managed identity's federated credential updated to match it — this was done for the CLI release pipeline in https://devdiv.visualstudio.com/OnlineServices/_git/tunnels/pullrequest/755906 but the SSH pipeline was missed.
This updates the SSH CI pipeline to use
Devtunnels-esrp-ame-msi-wif2as well.