FB pixel

Microsoft releases federated identity credentials for MS Entra

Categories Access Control  |  Biometrics News
Microsoft releases federated identity credentials for MS Entra
 

Microsoft wants users of Microsoft Entra to be able to log in to accounts across services without resending secure login credentials and certificates. To enable this, it now allows apps to use federated identity credentials (FICs) to accept access tokens from trusted digital identity providers.

Thus, a token issued on login will be valid for services that support the Microsoft Entra API. Entra includes Azure services, as well as apps using Kubernetes and GitHub.

A dev blog explains that “using a managed identity as a federated identity credential (FIC) provides continuous access to resources without the need to manage secret and certificate expiration and renewal.”

Per a separate Microsoft blog, the so-called “Workload Identity Federation flow” configures a user-assigned managed identity or app registration in Microsoft Entra ID to “trust tokens from an external identity provider (IdP), such as GitHub or Google. The user-assigned managed identity or app registration in Microsoft Entra ID becomes an identity for software workloads running, for example, in on-premises Kubernetes or GitHub Actions workflows.”

The FIC system supports tokens from GitHub, Kubernetes, and other third-party OIDC issuers. Apps can now also accept managed identity tokens issued by Microsoft Entra.

Unified identity management

An article by Shaun Nichols on the Cyber Risk Alliance’s SC Media resource notes a trend toward unified identity management, pointing to Okta’s recent move to put unified identity management systems at the center of its future business plan.

“Vendors see identity management solutions as central part of their information security plan in large part because using one token over multiple services minimizes the chances of intercept and protects from data breach at the hands of a third-party vendor who could otherwise have to collect sensitive information.”

Related Posts

Article Topics

 |   |   |   |   | 

Latest Biometrics News

 

ACCS announces participants in Australia’s Age Assurance Technology Trial

In keeping with its philosophy of transparency by default in running Australia’s Age Assurance Technology Trial, the Age Check Certification…

 

DPI-as-a-Packaged Solution marks major milestone with Trinidad and Tobago rollout

The first ever implementation of DaaS — DPI-as-a-Packaged Solution — is going live in Trinidad and Tobago in a test…

 

AI agents spark musings on identity, payments and wallets

AI agents continue to attract attention, including in the digital identity industry, which sees an opportunity for innovation. Their importance…

 

Trump deregulation is re-shaping the future of biometric surveillance in policing

The advent of AI has exponentially increased the capabilities of biometric tools such as facial recognition, fingerprint analysis, and voice…

 

World expands Android support for World ID credentials

World’s positive relationship with Malaysia continues, with the launch of Android support for World ID Credentials in the country, following…

 

Sri Lanka national data exchange to connect digital ID and public services

A fully developed foundational ID system, including citizen registration, may take 18 to 24 months for Sri Lanka to implement,…

Comments

Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.

Most Viewed This Week

Featured Company

Biometrics Insight, Opinion

Digital ID In-Depth

Biometrics White Papers

Biometrics Events