Edit

Workload identity federation Azure DevOps issuer retirement for multitenant applications

With the introduction of the Entra issuer for workload identity federation, new service connections are no longer created with the Azure DevOps issuer. We have announced retirement of the Azure DevOps issuer by July 1st, 2027 and deprecation by July 1st, 2026.

Currently, tasks that use a service connection configured to use Entra issuer don't support creating resources in multiple Entra tenants (for example, cross-tenant peered virtual networks) in a single atomic operation. When Microsoft closes this gap, it announces retirement of the Azure DevOps issuer and deprecates existing service connection for multitenant applications.