Test: consolidate MI E2E test onto shared Msal_Integration_tests UAMI#3926
Merged
Conversation
… test Switch AcquireTokenWithManagedIdentity_UserAssignedAsync from the Id4STesting managed identity (clientId 5bcd1685-...) to the consolidated lab UAMI Msal_Integration_tests (clientId 45344e7d-...) in resource group MSAL_MSI. This lets us retire the single-purpose Id4STesting identity and reuse the shared lab identity already used by MSAL.NET E2E tests. The test only acquires a token for the https://vault.azure.net audience, so no Key Vault permissions are required; the new identity is a superset. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
neha-bhargava
approved these changes
Jul 6, 2026
This was referenced Jul 10, 2026
Closed
Closed
Merged
Closed
This was referenced Jul 15, 2026
Closed
Closed
Open
Open
Closed
Closed
Open
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What
Switches the
AcquireTokenWithManagedIdentity_UserAssignedAsyncE2E test (tests/E2E Tests/TokenAcquirerTests/TokenAcquirer.cs) from the single-purposeId4STestinguser-assigned managed identity (clientId5bcd1685-b002-4fd1-8ebd-1ec3e1e4ca4d) to the shared/consolidated lab UAMIMsal_Integration_tests(clientId45344e7d-c562-4be6-868f-18dac789c021, RGMSAL_MSI, subc1686c51-b717-4fe0-9af3-24a20a41fb0c).Why
Id4STestingis a single-purpose identity whose only consumer across all repos is this one test. Consolidating onto the already-sharedMsal_Integration_testsUAMI (also used by MSAL.NET E2E tests) lets us retireId4STestingand reduce identity sprawl.https://vault.azure.net/.defaultaudience and asserts the header is non-empty - it does not read from any specific Key Vault. Token issuance happens at Entra, so no Key Vault permissions are required.Msal_Integration_testsis a permissions superset, so the swap is safe from an authorization standpoint.Testing
E2E test runs only on the ADO pipeline (
[OnlyOnAzureDevopsFact]); validate via the pipeline once the MI is assigned to the agent pool.