Azure Static Web Apps
An Azure service that provides streamlined full-stack web app development.
1,155 questions
Deployment of the FoodTruck Web App keeps getting discrepancy error when there is no discrepency.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(153.6, 79%, 24%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESS%3C/text%3E%3C/svg%3E)
Seth Shuey
0
Reputation points
Deployment of the FoodTruck Web App keeps getting discrepancy error on GitHub when there is no discrepancy. I have cross checked, double checked and triple checked. Who can I talk to resolve this?
GitHub response:
Run azure/login@v2
Running Azure CLI Login.
/usr/bin/az cloud set -n azurecloud
Done setting cloud: "azurecloud"
Federated token details:
issuer - https://token.actions.githubusercontent.com
subject claim - repo:APDSwebsites/Food-Truck-Ordering:environment:production
audience - api://AzureADTokenExchange
job_workflow_ref - APDSwebsites/Food-Truck-Ordering/.github/workflows/main_foodtruck.yml@refs/heads/main
Attempting Azure CLI login by using OIDC...
Error: AADSTS7002138: No matching federated identity record found for presented assertion subject 'repo:APDSwebsites/Food-Truck-Ordering:environment:production'. The subject matches with case-insensitive comparison, but not with case-sensitive comparison. Check your federated identity credential Subject, Audience and Issuer against the presented assertion. See documentation at: https://learn.microsoft.com/entra/workload-id/workload-identity-federation. See breaking change notification and remediation at: https://learn.microsoft.com/en-us/entra/identity-platform/reference-breaking-changes#august-2024. Trace ID: 291a65bc-b00b-4372-9210-76562c3c0500 Correlation ID: 0c81d7ec-2037-45e8-83d6-d716079c0b01 Timestamp: 2025-05-01 22:57:43Z
Error: Interactive authentication is needed. Please run:
az login
Error: Login failed with Error: The process '/usr/bin/az' failed with exit code 1. Double check if the 'auth-type' is correct. Refer to https://github.com/Azure/login#readme for more information.
Azure Static Web Apps
{count} votes
-
Seth Shuey 0 Reputation points
2025-05-02T01:40:20.5366667+00:00 I don't know, Seth. I hope someone can figure this out.
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(118.4, 10%, 21%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EPM%3C/text%3E%3C/svg%3E)
Prabhavathi Manchala 1,215 Reputation points Microsoft External Staff Moderator2025-05-05T07:15:20.3533333+00:00 Hi Seth Shuey,
The error is happening because GitHub Actions
can't connectto Azure using OIDC, likely due to amismatchin capitalization in the federated identity settings.GitHub Actions is trying to sign in to Azure using this ID:
repo:APDSwebsites/Food-Truck-Ordering:environment:productionBut Azure checks
letter casingexactly. So, if the setup in Azure uses lowercase or a slightly different format, it won’t match and causes this errorAADSTS7002138: No matching federated identity record found..., This change started in August 2024, and now even small casing differences can stop your deployment.- Go to the Azure portal -> Entra ID -> App registrations -> Your GitHub app registration.
- Under
Federated credentials, find the GitHub Actions credential and check theSubjectvalue. - Make sure the subject value matches exactly what GitHub is sending, including the
correct casing.If needed, delete the old credential and create a new one with the correct casing.
repo:APDSwebsites/Food-Truck-Ordering:environment:production- Save the changes and run your GitHub Action again.
https://learn.microsoft.com/en-us/entra/workload-id/workload-identity-federation
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(192, 28.999999999999996%, 28%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EGK%3C/text%3E%3C/svg%3E)
Gaurav Kumar 295 Reputation points Microsoft External Staff Moderator2025-05-06T01:42:48.4033333+00:00 Hi @Seth Shuey ,
We haven't heard any response from you and if you are still facing any issues, please let us know, we’ll be happy to help!
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(128, 88%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESS%3C/text%3E%3C/svg%3E)
Sirra Sneha 550 Reputation points Microsoft External Staff Moderator2025-05-06T04:16:00.0133333+00:00 Hi @Seth Shuey ,
Have you had a chance to implement the suggestions provided by @Prabhavathi Manchala ? Just checking if the issue with the federated identity has been resolved or if you're still facing any problems.
-
Sirra Sneha 550 Reputation points Microsoft External Staff Moderator
2025-05-08T11:41:01.6066667+00:00 Hi @Seth Shuey ,
Following up to check if the issue is resolved or if you need any further assistance. Let me know how it's going.
Sign in to comment
Sign in to answer