-
Type:
Suggestion
-
Resolution: Unresolved
-
Component/s: Pipelines - OpenID Connect
-
None
-
1
Issue Summary
Ability to select the format of "sub" claim in Unique identifiers when you configure OIDC integration
Some resource which is able to connect via OIDC is need for static "sub" claim, but "sub" claim in Bitbucket will be changed each build because it inclues "stepUuid".
example: https://docs.microsoft.com/en-us/azure/active-directory/develop/workload-identity-federation-create-trust
See Integrate Pipelines with resource servers using OIDC
> Example payload
Expected Results
You can choose the format of "sub" claim(Without `stepUuid` or not).
Actual Results
example:
"sub": "{7f91ae86-0388-45be-9a20-35cbc4fc5f75}:{c84baa79-f46a-414f-ab4d-e05775a5af99}:{stepUuid}",
Workaround
Currently there is no known workaround for this behavior. A workaround will be added here when available