Created by Claude - please verify

Federated identity credentials - beta API (includes flexible credentials), one $batch call per 20 apps.

Required Microsoft Graph permissions

Application.Read.All — application permission, granted to the app registration with admin consent.

Licence: None.

Endpoints: GET /v1.0/applications · GET /beta/applications/{id}/federatedIdentityCredentials ($batch)

If a permission is missing, this report shows a red load error with the Graph status code — not an empty table.

Workload Identity Federation Trusts

A federated identity credential lets an external system - a GitHub Actions workflow, a Kubernetes service account, another cloud - get tokens for your app without any secret. Whoever controls that external subject has the app's permissions. These trusts never expire and do not show up in any credential-expiry report.