GitHub Azure AD OIDC Authentication

A walk through of how to authenticate between GitHub Actions and Azure AD without having to store secrets and instead using OIDC.

🔎 Looking for content on a particular topic? Search the channel. If I have something it will be there!

▬▬▬▬▬▬ C H A P T E R S ⏰ ▬▬▬▬▬▬
0:00 - Introduction
0:47 - How authentication used to work
1:47 - Using OIDC
5:21 - GitHub identity token and exchange for AAD access token
8:08 - Types of subject
11:15 - AAD app registration
13:42 - Using azure/login
15:22 - Adding federated credential
18:20 - Storing required values and using in GitHub
19:44 - App roles
20:10 - Summary

▬▬▬▬▬▬ K E Y L I N K S 🔗 ▬▬▬▬▬▬
► Whiteboard:
🔗 https://github.com/johnthebrit/Random...
► GitHub OIDC authentication:
🔗 https://docs.github.com/en/actions/de...
► GitHub to AAD OIDC authentication:
🔗 https://learn.microsoft.com/azure/dev...
► AAD OIDC authentication:
🔗 https://learn.microsoft.com/azure/act...

▬▬▬▬▬▬ Want to learn more? 🚀 ▬▬▬▬▬▬
📖 Recommended Learning Path for Azure
🔗 https://learn.onboardtoazure.com
🥇 Certification Content Repository
🔗 https://github.com/johnthebrit/Certif...
📅 Weekly Azure Update
🔗    • Azure Infrastructure Updates  
☁ Azure Master Class
🔗    • Microsoft Azure Master Class v2 (being upd...  
⚙ DevOps Master Class
🔗    • DevOps Master Class  
💻 PowerShell Master Class
🔗    • PowerShell Master Class  
🎓 Certification Cram Videos
🔗    • Microsoft Certification Exam Prep Videos  
🧠 Mentoring Content
🔗    • Virtual Mentoring  
❔ Questions? Maybe I answered it in my FAQ
🔗 https://savilltech.com/faq.html
👕 Cure Childhood Cancer Charity T-Shirt Channel Store
🔗 https://johns-t-shirts-store.creator-...

👂 I have manually updated the captions to be as accurate as possible. Enable the subtitles and from there you can translate to your native language via the auto-translate feature in settings!    • YouTube Captions and Auto Translate Quick ...   for a demo of using this feature.

SUBSCRIBE ✅    / @ntfaqguy  

#microsoft #azure #johnsavillstechnicaltraining #onboardtoazure #cloud