Clarification needed on Supported Scenarios note

[John-Garland]

The supported scenarios section includes a note that reads "Azure AD-issued tokens might not be used for federated identity flows." I do not think this clearly conveys the meaning (the word 'might' is likely the problem, but the whole sentence could probably be better phrased.) Is the intended meaning that "Azure AD-issued tokens may not be used"? Or "Azure AD is not a supported source for federated identity flows?

---

Document Details

⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

• ID: cf644d11-51ae-8ef0-34c8-d471a47d5cf1
• Version Independent ID: d5e3190b-f287-6542-fd2b-f8fe9066c23e
• Content: Workload identity federation - Microsoft Entra
• Content Source: articles/active-directory/develop/workload-identity-federation.md
• Service: active-directory
• Sub-service: develop
• GitHub Login: @rwike77
• Microsoft Alias: ryanwi

[JamesTran-MSFT]

@John-Garland Thanks for your feedback! I've assigned this issue to the author who will investigate and update as appropriate.

[rwike77]

@John-Garland Hi, you're right, the note isn't very clearly worded. It should be "Azure AD issued tokens may not be used for federated identity flows." The federated identity credentials flow does not support tokens issued by Azure AD. Hope that helps, I'll update the note.

[rwike77]

I merged some updates, which should go live tomorrow. Closing this now, feel free to re-open if needed. #please-close