Failures in Pipelines with Workload Identity federation based ARM service connections

Our engineers have identified the recent changes to enable AFD for token service in Europe region have resulted in intermittent failures in generating token. Our engineers are attempting a possible mitigation to disable AFD. We will continue to investigate and post additional updates as we learn more.

Microsoft Entra engineers have found that calls from Azure DevOps are getting throttled which is resulting in token generation failures. Microsoft Entra engineers are actively investigating the issue to find the cause for this throttling.

As a workaround, we request users to migrate to other authentication mechanisms like service principal if there are any critical workloads that needs to be processed with priority.

We will continue to investigate and post additional updates as we learn more.

Our engineers have found that calls to Microsoft Entra are failing to get the token. We are actively working with Microsoft Entra engineers to investigate the issue and identify a possible mitigation. We will continue to investigate and post additional updates as we learn more.

The impact seems to be widespread globally. The root cause is not understood yet and our engineers continue to investigate the issue to identify the mitigation steps.

Our engineers are currently investigating an event impacting Azure DevOps related to workload identity federated based ARM service connections. The event is being triaged and we will post an update as soon as we know more.