Repository navigation

Support Entra ID sign-in in sovereign clouds and explain sign-in failures - #1050

Draft

Tomasz Naumowicz (tnaum-ms) wants to merge 50 commits into

mainfrom

dev/tnaum/gov-clouds

Draft

Support Entra ID sign-in in sovereign clouds and explain sign-in failures#1050
Tomasz Naumowicz (tnaum-ms) wants to merge 50 commits into
mainfrom
dev/tnaum/gov-clouds

Commits on Oct 23, 2026
- docs: add sovereign-clouds feature research and plan
  
  Tomasz Naumowicz (tnaum-ms)
  and
  Copilot
  committed
  7558266
- docs(sovereign-clouds): record plan approval and azure.us cluster domain
  
  Tomasz Naumowicz (tnaum-ms)
  and
  Copilot
  committed
  3388cb7
- feat(auth): add cloud-aware scopes and explicit custom host trust
  
  Tomasz Naumowicz (tnaum-ms)
  and
  Copilot
  committed
  99f7c2b
- feat(auth): add custom sovereign cloud settings
  
  Tomasz Naumowicz (tnaum-ms)
  and
  Copilot
  committed
  5aafc30
- docs: add sovereign clouds guidance
  
  Tomasz Naumowicz (tnaum-ms)
  and
  Copilot
  committed
  79af884
- docs: link sovereign clouds guidance
  
  Tomasz Naumowicz (tnaum-ms)
  and
  Copilot
  committed
  891af71
- feat(auth): resolve token audiences for interactive and managed identity flows
  
  Tomasz Naumowicz (tnaum-ms)
  and
  Copilot
  committed
  b1e39d1
- feat(auth): use resolved cloud audience for interactive sign-in
  
  Tomasz Naumowicz (tnaum-ms)
  and
  Copilot
  committed
  00c8752
- docs: fix customEnvironment settings example
  
  Tomasz Naumowicz (tnaum-ms)
  and
  Copilot
  committed
  5e1930e
- feat(auth): use resolved cloud audience for managed identity
  
  Tomasz Naumowicz (tnaum-ms)
  and
  Copilot
  committed
  89a2489
- feat(auth): resolve shell and playground audiences on the main thread
  
  Tomasz Naumowicz (tnaum-ms)
  and
  Copilot
  committed
  32e8f5f
- feat(auth): copy managed identity connection strings with cloud audiences
  
  Tomasz Naumowicz (tnaum-ms)
  and
  Copilot
  committed
  df8652a
- docs(auth): list per-cloud managed identity token resources
  
  Tomasz Naumowicz (tnaum-ms)
  and
  Copilot
  committed
  8082fa9
- docs(sovereign-clouds): record Part A and Part C progress
  
  Tomasz Naumowicz (tnaum-ms)
  and
  Copilot
  committed
  a01fc37
- Add recent Entra token failure registry
  
  Tomasz Naumowicz (tnaum-ms)
  and
  Copilot
  committed
  6ad4da8
- Classify Entra sign-in errors with a single rule table
  
  Tomasz Naumowicz (tnaum-ms)
  and
  Copilot
  committed
  7d47bb8
- Explain Entra sign-in failures through connection diagnostics
  
  Tomasz Naumowicz (tnaum-ms)
  and
  Copilot
  committed
  050eeff
- Record failed Entra token acquisitions across connection surfaces
  
  Tomasz Naumowicz (tnaum-ms)
  and
  Copilot
  committed
  97e4b03
- Document implemented Entra diagnostics and validation
  
  Tomasz Naumowicz (tnaum-ms)
  and
  Copilot
  committed
  20c38ba
- Add Entra cloud auth traces
  
  Tomasz Naumowicz (tnaum-ms)
  and
  Copilot
  committed
  17a95f6
- docs(sovereign-clouds): record support tracing
  
  Tomasz Naumowicz (tnaum-ms)
  and
  Copilot
  committed
  66812b3
- chore(l10n): regenerate bundle for sovereign cloud strings
  
  Tomasz Naumowicz (tnaum-ms)
  and
  Copilot
  committed
  4c4f871
- fix(lint): use public azureauth exports and type imports
  
  Tomasz Naumowicz (tnaum-ms)
  and
  Copilot
  committed
  4f0fd24
- style: format sovereign cloud changes
  
  Tomasz Naumowicz (tnaum-ms)
  and
  Copilot
  committed
  e98e2f4
Commits on Oct 26, 2026
- docs: record sovereign cloud connectivity review
  
  Tomasz Naumowicz (tnaum-ms)
  and
  Copilot
  committed
  f3a1b68
- docs(sovereign-clouds): enhance correctness review with detailed second pass findings and recommendations
  Tomasz Naumowicz (tnaum-ms)
  committed
  0b94527
- fix(auth): reject invalid applicable token resource overrides
  
  Tomasz Naumowicz (tnaum-ms)
  and
  Copilot
  committed
  047465a
- fix(auth): retain cloud evidence on all resolution paths
  
  Tomasz Naumowicz (tnaum-ms)
  and
  Copilot
  committed
  2e27b55
- fix(auth): explain invalid VS Code custom cloud definitions
  
  Tomasz Naumowicz (tnaum-ms)
  and
  Copilot
  committed
  f1bc8bf
- fix(auth): harden custom OIDC hostname suffix settings
  
  Tomasz Naumowicz (tnaum-ms)
  and
  Copilot
  committed
  ecd0995
- fix(auth): recognize sovereign DocumentDB hosts in credential wizards
  
  Tomasz Naumowicz (tnaum-ms)
  and
  Copilot
  committed
  0de180b
- docs(sovereign-clouds): record fix review checkpoint
  
  Tomasz Naumowicz (tnaum-ms)
  and
  Copilot
  committed
  147e0bd
- docs(sovereign-clouds): record S7 telemetry query and access blocker
  
  Tomasz Naumowicz (tnaum-ms)
  and
  Copilot
  committed
  f29b4e1
- Add closed-enum cloud telemetry to connection startup (S1)
  
  Tomasz Naumowicz (tnaum-ms)
  and
  Copilot
  committed
  20e07a3
- Send extension appName to sovereign Azure endpoints (S2)
  
  Tomasz Naumowicz (tnaum-ms)
  and
  Copilot
  committed
  c20cc61
- Retain safe local IMDS environment evidence (S3)
  
  Tomasz Naumowicz (tnaum-ms)
  and
  Copilot
  committed
  7537d69
- Explain OIDC allowed-host rejections through Entra diagnostics (S4)
  
  Tomasz Naumowicz (tnaum-ms)
  and
  Copilot
  committed
  f6406d8
- Validate custom hostname suffixes in Settings (S5)
  
  Tomasz Naumowicz (tnaum-ms)
  and
  Copilot
  committed
  dd29c55
- Exercise sovereign auth handlers and workers with real resolvers (S6)
  
  Tomasz Naumowicz (tnaum-ms)
  and
  Copilot
  committed
  bb08f47
- docs(sovereign-clouds): checkpoint enhancement and preview progress
  
  Tomasz Naumowicz (tnaum-ms)
  and
  Copilot
  committed
  eee66fd
- Bound AADSTS classification to complete five-to-nine digit codes (R6)
  
  Tomasz Naumowicz (tnaum-ms)
  and
  Copilot
  committed
  d8f2db9
- Use platform-neutral opaque broker guidance (R7)
  
  Tomasz Naumowicz (tnaum-ms)
  and
  Copilot
  committed
  439047d
- Clear recent Entra token failures after successful acquisition (R8)
  
  Tomasz Naumowicz (tnaum-ms)
  and
  Copilot
  committed
  6f1f507
- Clarify managed identity and private DNS sovereign guidance (R9)
  
  Tomasz Naumowicz (tnaum-ms)
  and
  Copilot
  committed
  853ef40
- docs(sovereign-clouds): correct historical D11 evidence query
  
  Tomasz Naumowicz (tnaum-ms)
  and
  Copilot
  committed
  18060ae
- test: fix sovereign review verification imports
  
  Tomasz Naumowicz (tnaum-ms)
  and
  Copilot
  committed
  6c863f4
- chore(sovereign-clouds): finalize localization and verified formatting
  
  Tomasz Naumowicz (tnaum-ms)
  and
  Copilot
  committed
  508a1d6
- docs(sovereign-clouds): record completed fixes and verified preview handoff
  
  Tomasz Naumowicz (tnaum-ms)
  and
  Copilot
  committed
  4ee1f8d
- chore: prettier-fix
  Tomasz Naumowicz (tnaum-ms)
  committed
  45ec2ea
- version bump
  Tomasz Naumowicz (tnaum-ms)
  committed
  7f2a288

Commits

Commits on Oct 23, 2026

Commits on Oct 26, 2026