Skip to content

Docs uplift - #620

Open
MaddyMicrosoft wants to merge 3 commits into
masterfrom
docs-uplift
Open

Docs uplift#620
MaddyMicrosoft wants to merge 3 commits into
masterfrom
docs-uplift

Conversation

@MaddyMicrosoft

@MaddyMicrosoft MaddyMicrosoft commented Aug 21, 2026

Copy link
Copy Markdown
Member

Summary

Documentation-only uplift adding three README entries that resolve recurring support questions. No code or behavior changes.

Changes

1. Troubleshooting section for OIDC federated credential subject mismatch
Adds a new ## Troubleshooting section (with TOC entry) covering the AADSTS700213 / AADSTS7002138 "no matching federated identity record" errors. Documents both common root causes, case-sensitive Subject matching, and portal-generated subjects that embed GitHub owner/repository numeric IDs, and the fix for each.

2. Client-id masking note
Documents in the client-id input section that the action intentionally registers client-id as a secret (via core.setSecret) so it is masked in logs, and why. Notes that tenant-id and subscription-id are not masked.

3. Azure Stack Hub CLI version note (
Adds a note to the Azure Stack Hub section that Azure CLI newer than 2.66.x no longer supports Azure Stack Hub, so environment: 'AzureStack' requires pinning Azure CLI to 2.66.x (LTS). Prevents the failure hit when using the existing example on a current runner.

Related issues

#617
#566
#534

Notes

  • Documentation only; no source, tests, or action behavior touched.
  • Content verified against the current source (master): the masking behavior in LoginConfig.ts, and the Azure Stack CLI guidance matching Azure CLI's own notice.

MaddyMicrosoft and others added 3 commits August 21, 2026 02:34
…match

Document the AADSTS700213 / AADSTS7002138 "no matching federated identity
record" failures caused by case-sensitive subject matching and by portal-
generated subjects that include GitHub owner/repository numeric IDs.

Addresses #617. Also relevant to #573.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Explain in the client-id input section that the action registers the
client-id as a secret (core.setSecret), why it is masked, and that
tenant-id and subscription-id are not masked.

Addresses #566.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Note in the Azure Stack Hub section that Azure CLI newer than 2.66.x no
longer supports Azure Stack Hub, so environment: 'AzureStack' requires
pinning Azure CLI to 2.66.x (LTS). Prevents the failure reported when
using the example on a current runner.

Addresses #534.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant