create-wi

Installation
SKILL.md

Azure Workload Identity Federation Automation

This skill automates the creation and deletion of Azure DevOps service connections using workload identity federation (WIF) with managed identities. Scripts automatically read deployment configuration from deploy.json, enabling secure, passwordless authentication from Azure DevOps pipelines to Azure resources.

Overview

Workload identity federation (WIF) is a secure authentication method that uses OpenID Connect (OIDC) to establish trust between Azure DevOps and Azure managed identities. Instead of managing secrets, this approach uses federated credentials to allow Azure DevOps to authenticate to Azure resources.

Key Benefits

  • No secrets management: No keys, certificates, or connection strings to rotate
  • OIDC-based: Industry-standard OpenID Connect protocol
  • Federated trust: Direct trust between Azure DevOps and Entra ID
  • Automatic issuer sync: Scripts automatically detect and sync Azure DevOps generated issuer/subject

Creating a Workload Identity Service Connection

Prerequisites

Related skills

More from alexander-kastil/agentic-sw-engineering

Installs
1
GitHub Stars
3
First Seen
Mar 11, 2026