adding federated credential to an azuread application with a .nl or dev.eu domain name in the issuer filed gives an error

Martijn van der Ploeg 0 Reputation points
2025-03-12T09:11:08.88+00:00

Looks like the flexible credential preview feature for federated credentials only works for gitlab.*.com domain names if i try anything else like gitlab.mycompany.nl or gitlab.mycompany.dev.eu i get the error  "The FederatedIdentityCredential.ClaimsMatchingExpression.Value is invalid. Rule exception: Expression is not supported for applications in this cloud 'Public' using issuer 'https://gitlab.mycompany.nl'/.

 

if i try https://gitlab.mycompany.com in the issuer field it works

 

payload :
{      
"name": "name",      
"issuer": "https://gitlab.mycompany.dev.eu",
      "claimsMatchingExpression": {         "value": "claims['sub'] matches 'project_path:my/project:ref_type:branch:ref:*'",        
"languageVersion": 1      
},      
"description": "GitLab service account federated identity",      
"audiences": [         "https://gitlab.mycompany.dev.eu"       ]     }

Is this by design ? we would like to use it with out on premise gitlab servers that have an dev.eu domain name

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
23,611 questions
{count} votes

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.