---
title: "Get Azure federated credentials"
method: GET
path: "/compute_resources/azure/federated_credentials"
tags: ["Compute Resources"]
---

# Get Azure federated credentials

`GET /compute_resources/azure/federated_credentials`

Retrieve the `subject_id` and `audience` values needed for manual configuration of Azure app registration federated credentials for Azure hybrid compute.

Use this endpoint when you manage the Azure Enterprise Application and federated credentials outside Terraform. If Terraform manages the full deployment, Orchestra configures these values automatically.

The response is workspace-specific. Fetch credentials separately for each Orchestra workspace where you run Azure hybrid compute.

## Response `200`

Successful response.

- AzureFederatedCredentialsResponse — Federated credentials required for Azure workload identity setup.
  - `subjectId` string, required
  - `audience` string, required

## Other responses

- `401` — The request was not authorized. Check the API key and `Authorization` header.
- `403` — The request was forbidden, or the Metadata API is not enabled for this workspace.

---

[API](https://skmtc.dev/getorchestra/apis/orchestra-api.md) · [All operations](https://skmtc.dev/getorchestra/apis/orchestra-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/getorchestra/orchestra-api/revisions/50f4d2ba114d/schema)
