GitHub Actions

Whimsical forest scene with three gnomes at a stone bridge labelled Identity Transition: on the App Registration side, a gnome holds old keys beside a chest of secrets and tokens and a scroll listing client secret and certificate; in the middle, a gnome hands a glowing OIDC token scroll across the bridge; on the Managed Identity side, a gnome stands among shields reading No Secrets, Auto-Rotated, and Secure Access — symbolizing the move from stored credentials to federated identities.

Engineering
#Sharepoint Online
#Microsoft Entra ID
#CI/CD
#GitHub Actions
#Azure DevOps
#GitLab
#PowerShell
#Security

Goodbye, Client Secrets: Passwordless CI/CD to SharePoint with App Registrations, Managed Identities, and Federated Credentials

How GitHub Actions, Azure DevOps, and GitLab CI/CD authenticate to Microsoft Entra ID and create SharePoint sites without a stored secret — workload identity federation with app registrations and managed identities, plus the PnP PowerShell and CLI for Microsoft 365 contributions that came out of building the demos.

Fabian Hutzli

Jul 27, 2026 · 17 min read

PuntoBello Blog

Goodbye, Client Secrets: Passwordless CI/CD to SharePoint with App Registrations, Managed Identities, and Federated Credentials