Migrates an endpoint that exchanges an external identity provider's workload token for a short-lived application credential — trusted publishing, workload identity federation, federated credentials, OIDC credential exchange.
Install
npx skills add microsoft/upgrade-agent-plugins --skill migrating-federated-oidc-token-exchangenpx skills add microsoft/upgrade-agent-plugins --skill migrating-federated-oidc-token-exchange -a claude-code -gnpx skills add microsoft/upgrade-agent-plugins --skill migrating-federated-oidc-token-exchange -a codex -ggemini skills install https://github.com/microsoft/upgrade-agent-plugins.git --path plugins/upgrade-agent/upgrade/dotnet/skills/lazy/libraries/migrating-federated-oidc-token-exchangegh skill install microsoft/upgrade-agent-plugins migrating-federated-oidc-token-exchangegit clone --depth 1 https://github.com/microsoft/upgrade-agent-plugins /tmp/microsoft__upgrade-agent-plugins
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/microsoft__upgrade-agent-plugins/plugins/upgrade-agent/upgrade/dotnet/skills/lazy/libraries/migrating-federated-oidc-token-exchange ~/.claude/skills/migrating-federated-oidc-token-exchange # Claude Code
cp -R /tmp/microsoft__upgrade-agent-plugins/plugins/upgrade-agent/upgrade/dotnet/skills/lazy/libraries/migrating-federated-oidc-token-exchange ~/.agents/skills/migrating-federated-oidc-token-exchange # Codex, Cursor, Gemini CLI, Copilot, OpenCode