GEgetorchestra
Compute Resources

Get Azure federated credentials

Changed on

Retrieve the subject_id and audience values needed for manual configuration of Azure app registration federated credentials for Azure hybrid compute.

Use this endpoint when you manage the Azure Enterprise Application and federated credentials outside Terraform. If Terraform manages the full deployment, Orchestra configures these values automatically.

The response is workspace-specific. Fetch credentials separately for each Orchestra workspace where you run Azure hybrid compute.

get/compute_resources/azure/federated_credentials

Request

  • Base URL
    https://app.getorchestra.io/api/engine/public
  • URL
    https://app.getorchestra.io/api/engine/public/compute_resources/azure/federated_credentials
  • Auth
    • HTTP bearer
    • or OAuth 2
      Authorization code: https://app.getorchestra.io/oauth/authorize
      Token URL: https://app.getorchestra.io/oauth/token scopes: orchestra:read

Headers

X-Orchestra-Account-Idstring uuid4 nullable

Act on this account rather than the one the credential resolves to. Omit it to use the credential's own account. An API key is issued to a single account, so it may only name that account; an OAuth token may name any account its grant covers.

Response

Successful response.

subjectIdstring required
audiencestring required

Changes

  • e45165e7e223Revision changes
    • info

      the endpoint scheme security BearerAuthReadOnly was removed from the API

    • info

      added the new optional header request parameter X-Orchestra-Account-Id