adding federated credential to an azuread application with a .nl or dev.eu domain name in the issuer filed gives an error
Looks like the flexible credential preview feature for federated credentials only works for gitlab.*.com
domain names if i try anything else like gitlab.mycompany.nl
or gitlab.mycompany.dev.eu
i get the error "The FederatedIdentityCredential.ClaimsMatchingExpression.Value is invalid. Rule exception: Expression is not supported for applications in this cloud 'Public' using issuer 'https://gitlab.mycompany.nl'/.
if i try https://gitlab.mycompany.com
in the issuer field it works
payload :
{
"name": "name",
"issuer": "https://gitlab.mycompany.dev.eu",
"claimsMatchingExpression": { "value": "claims['sub'] matches 'project_path:my/project:ref_type:branch:ref:*'",
"languageVersion": 1
},
"description": "GitLab service account federated identity",
"audiences": [ "https://gitlab.mycompany.dev.eu" ] }
Is this by design ? we would like to use it with out on premise gitlab servers that have an dev.eu domain name