Update "Create a service connection for app registration authentication in Azure DevOps"

[Ronald Bosma (ronaldbosma)]

The screen to create a new service connection with type "App registration or Managed identity (manual)" has changed. The Environment and Directory (tenant) ID fields are now part of the first step instead of the second step. I've updated the text for both the managed identity and app registration versions to reflect this.

[prmerger-automator]

Ronald Bosma (@ronaldbosma) : Thanks for your contribution! The author(s) and reviewer(s) have been notified to review your proposed change.

[prmerger-automator]

Ronald Bosma (@ronaldbosma) : Thanks for your contribution! The author(s) and reviewer(s) have been notified to review your proposed change.

[Regan Downer (v-regandowner)]

Rami Bououni (@ramiMSFT)

Can you review the proposed changes?

IMPORTANT: When the changes are ready for publication, adding a #sign-off comment is the best way to signal that the PR is ready for the review team to merge.

#label:"aq-pr-triaged"
@MicrosoftDocs/public-repo-pr-review-team

[Copilot]

Pull request overview

Updates the workload identity federation service connection setup instructions to match the latest Azure DevOps UI, where Environment and Directory (tenant) ID are collected in Step 1: Basics instead of later in the flow.

Changes:

• Reworks the managed identity service connection instructions to document Step 1: Basics parameters (including Environment and Directory (tenant) ID).
• Reworks the app registration service connection instructions similarly to align with the updated wizard layout.
• Simplifies the Authentication section wording by removing now-duplicated tenant/environment instructions from later steps.

Suppressed comments (2)

docs/pipelines/release/configure-workload-identity.md:278

• This sentence repeats "following parameters" twice, which reads awkwardly. Consider simplifying it to a single instruction line.

    **Step 1: Basics** contains the following parameters. Enter or select the following parameters:

docs/pipelines/release/configure-workload-identity.md:282

• The UI field name is typically written in sentence case as "Service connection name" across the docs (for example, docs/pipelines/library/add-devops-entra-service-connection.md:74). Using title case here is inconsistent.

   | **Service Connection Name** | Required. You'll use this value in your federated credential subject identifier. |

[Steve Danielson (steved0x)]

#sign-off

[prmerger-automator]

Invalid command: '#sign-off'. Only the assigned author of one or more file in this PR can sign off. Rami Bououni (@ramiMSFT)

[Rami Bououni (ramiMSFT)]

#sign-off

[Copilot]

Pull request overview

Copilot reviewed 1 out of 1 changed files in this pull request and generated no new comments.

Suppressed comments (3)

docs/pipelines/release/configure-workload-identity.md:285

• Similarly here, "Enter the Tenant ID from your app registration" is misleading. The tenant ID is for the Microsoft Entra tenant (directory) where the app registration exists.

   | **Directory (tenant) ID** | Required. Enter the Tenant ID from your app registration. |

docs/pipelines/release/configure-workload-identity.md:325

• This line has trailing whitespace at the end, which can cause markdown lint/build issues in some pipelines. Please remove the extra spaces.

    1. In the **Authentication** section, for **Application (client) ID**, enter the Client ID for your app registration.    

docs/pipelines/release/configure-workload-identity.md:146

• The description "Enter the Tenant ID from your managed identity" is misleading: the tenant ID is for the Microsoft Entra tenant (directory) the identity belongs to, not something you obtain from the managed identity itself. Consider rewording to avoid implying the managed identity provides the tenant ID.

This issue also appears on line 285 of the same file.

   | **Directory (tenant) ID** | Required. Enter the Tenant ID from your managed identity. |