Git connect API with service principal fails in UK South

[marwha_dhruv]

Hi

I am trying to use the fabric git connect api to dynamically assign a connection to a workspace and to connect it to Azure DevOps git. I've tested the API and it's working for one of my other use cases where the capacity is located in Norht Europe but it's failing for when I'm trying the same if the tenant is in UK south. Any suggestions?

This is the error that I get from the Git Connect API  when it's being tested with the tenant in UK South.

{'requestId': 'd948ec33-a02c-4a6e-82f4-c0320febc7ef', 'errorCode': 'GitCredentialsConfigurationNotSupported', 'message': 'Credentials source ConfiguredConnection is not supported for AzureDevOps.'}

The same API works in north europe. I've re-checekd that the connection creation, role assignment etc are done in the same way across tenants. THe API is beign tested using Python and the service principal used for authentication has the right permissions on the workspace and the connection level.

[v-venuppu]

Hi @DHruvMakutu ,

Currently, Service Principal authentication is not supported in all regions for the Git Connect API, and the error you are seeing is due to this limitation in the UK South region. The Personal Access Token (PAT) is a more widely supported authentication method for now.

As for when Service Principal authentication will be available across regions, there is no official timeline provided at the moment.

But for the updates,I recommend submitting your issue through Microsoft's official Support Ticket channel, such as the:How to create a Fabric and Power BI Support ticket - Power BI | Microsoft Learn

Thank you.

[v-venuppu]

Hi @marwha_dhruv ,

I hope the information provided is helpful.I wanted to check whether you were able to resolve the issue with the provided solutions.Please let us know if you need any further assistance.

Thank you.

[v-venuppu]

Hi @marwha_dhruv ,

May I ask if you have resolved this issue? Please let us know if you have any further issues, we are happy to help.

Thank you.

[KevinChant]

It could be due to a few different issues.

Error message suggests you are trying to perform could be authentication with Python. Compare it to how I did it for working with a Python script for fabric-cicd below:
https://github.com/kevchant/AzureDevOps-fabric-cicd-sample 

Are Azure DevOps and Fabric in different regions? If so, check that "Users can export items to Git repositories in other geographical locations" is enabled in Tenant settings. Alternatively, test with an Azure DevOps organizatin in the same region.

Final thing to check is your authentication details. If you are entering the details as parameters or variables check that you have added quotes where required.

[DHruvMakutu]

But I'm trying to move away from the PersonalAccessToken logic due to business requirements. Do you know when this would be enabled in other regions?

[v-venuppu]

Hi @marwha_dhruv ,

I wanted to check if you had the opportunity to review the information provided and resolve the issue..?Please let us know if you need any further assistance.We are happy to help.

Thank you.

[v-venuppu]

Hi @marwha_dhruv ,

Thank you for reaching out to Microsoft Fabric Community.

You are getting an error because the Git Connect API doesn't support the type of credentials you're using (ConfiguredConnection) for Azure DevOps in the UK South region. It works in North Europe because that region supports it.

You can try using PersonalAccessToken instead of ConfiguredConnection - it's more widely supported.
Make sure your workspace and connection are in the same region.

[DHruvMakutu]

Hi

As mentioned before, we do not want to use PersonalAccessToken due to security reasons. Can I get an estimate as to when will Service principal authentication be available for git across regions please?