Enabling OAuth in Azure DevOps Webhooks
Your message is well-written and clear. Here's a minor adjustment for improved flow: Hello Azure Support Team, I hope this message finds you well. Currently, we're encountering a 401 Unauthorized error when attempting to authenticate our Azure Function App with Azure AD on Azure DevOps (ADO) Webhooks. This issue arises because ADO Webhooks only support Basic Authentication. Consequently, we are requesting the addition of a feature that enables the usage of OAuth2 in ADO Webhooks. This addition would resolve authentication issues, particularly when our Function App is integrated with Azure AD. Currently, we are using Basic Authentication, but this does not align with our internal standard security measures. We hope that this feature will be added to ADO Webhooks.
OAuth2 token from Instance Metadata Service (IMDS): Can I fetch using client_credentials POST?
I can call the IMDS and receive a token for my VM's System-assigned or User-assigned Managed Identities, per https://learn.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/how-to-use-vm-token#get-a-token-using-curl curl 'http://169.254.169.254/metadata/identity/oauth2/token?api-version=2018-02-01&resource=https%3A%2F%2Fmanagement.azure.com%2F' -H Metadata:true -s But what if I want to fetch this token using an OAuth2 RFC6749 Client Credentials Request (4.4.2) by sending a POST with grant_type=client_credentials . I have an application that wants to retrieve tokens in this way. Is that possible? I can only find GET requests to the IMDS for these oauth2/token endpoints documented.
How to validate Azure OAuth access token using a api end point?
Hi There, Apologies if this question has been asked already. How to validate azure oauth access token using a api end point from microsoft azure? Have read this article https://docs.microsoft.com/en-us/azure/active-directory/develop/access-tokens#validating-tokens but couldn't find it there. Please help me with a url endpoint to post and validate an azure access token. Thanks in advance!
