Azure Container Apps Github Workflows

Question

Hi

I created a container apps instance, and conencted with github workflows for CICD
Suddenly today I started getting this error during my az login step

AADSTS700213: No matching federated identity record found for presented assertion subject 'repo:<ORG>/<REPO>:ref:refs/heads/main'. Check your federated identity credential Subject, Audience and Issuer against the presented assertion. https://learn.microsoft.com/entra/workload-id/workload-identity-federation

So I havent made any change in Azure portal resource and code for the past 1 week.. Today I tried to update something small and this happened

Now i dont know if this might be the issue but I changed my Repo name yesterday :)

WHAT I HAVE TRIED

1. I tried to re try the workflow - didnt work
2. Tried to reset git connections from Container Apps -

but got this error
Setting up continuous deployment

Failed to set up continuous deployment with error:At least one resource deployment operation failed. Please list deployment operations for details. Please see https://aka.ms/arm-deployment-operations for usage details.
in activity log i can see -

Resource/subscriptions/f6394f17-1853-4559-8628-fbb39f23bc18/resourcegroups/gen-ai/providers/Microsoft.App/containerapps/ais-agent-app/providers/Microsoft.Authorization/roleAssignments/3bc908b7-6a4d-44fa-9954-29efde73c206

• Operation nameCreate role assignment
• Time stampFri Sep 26 2025 15:59:24 GMT+0530 (India Standard Time)
• Event initiated ******@publicisgroupe.net
• Error codeRoleAssignmentExists
• MessageThe role assignment already exists.

Please help. I have a demo on monday :(

Answer 1

Hi Rakesh,

I deleted the Github connection and re-established it. It worked.

There was no need to actually check Entra ID since I hadnt set it up earlier.

Answer 2

Hi @Abhay Chandramouli ,

Thanks for reaching out on Microsoft Q&A.

Could you please check and confirm if using federated identity credentials.

Update the existing federated credential Subject:

• In Azure Portal, navigate to App registration --> Certificates & secrets --> Federated credentials --> Edit the credential’s Repository to repo:ORG/NEW-REPO:ref:refs/heads/main.

Please do let me know if you are still facing issue and share your findings.

Reference: https://learn.microsoft.com/en-us/entra/workload-id/workload-identity-federation-considerations