Forum Discussion

yashaswi_raj's avatar
yashaswi_raj
Helper I
10 months ago

Workload Identity Federation

  Does Sharepoint Supports using WIF instead of SPN secrets in azure , Can we do that ? using ADF or notebook 
security
tayloramy's avatar
tayloramy
Super User
10 months ago

Hi yashaswi_raj,


SharePoint Online itself doesn’t “support WIF” directly-the Microsoft Entra (Azure AD) app that calls SharePoint/Graph does. You can replace client secrets with Workload Identity Federation (WIF) for your app to obtain tokens without storing a secret, but today the Fabric/Data Factory SharePoint connectors are still wired for service principals (secret or certificate) in the connection UI. In notebooks, WIF only works if the runtime can present an OIDC token (e.g., GitHub Actions, AKS). Fabric notebook runtimes don’t expose an OIDC token source yet, so you’ll typically use a service principal with a certificate instead of a secret.

 

If you found this helpful, consider giving some Kudos. If I answered your question or solved your problem, mark this post as the solution.