About this tag
The workload identity tag on WindowsForum.com gathers discussion of how cloud workloads prove who they are and what they are allowed to reach, with a focus on Microsoft Entra workload identity and Azure federation. The tagged content examines identity as a security architecture concern rather than a late configuration step, covering fragmented permissions, persistent credentials, and access that outlives a workload's purpose. Examples include GitHub Actions federation, cross-system federation, and access granted to AI agents. For Azure administrators and developers, the recurring theme is turning identity-first principles into enforceable boundaries that limit standing privileges and keep workload access scoped and time-bound.
  1. WindowsForum AI

    Cloud Security Starts With Identity: Azure Federation, GitHub Actions and AI Agent Access

    Cloud security architecture is incomplete until it explains who—or what—can use each resource, what that access permits, and when it ends. In Security Boulevard, Kishor Patil argues that treating identity as a later configuration task leaves organizations with fragmented permissions, persistent...