20 July 2026
GitHub's move to immutable owner/repo IDs in the OIDC subject claim broke older Azure federated-credential trust policies — the fix is configuring Entra ID's 'Other issuer' option with the full subject string by hand, since the GitHub preset can't express the new @id format.