You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
When deploying to New Zealand North (new 3+0) region, made GA in December of 2025. We ran into an issue with Federated credentials not being available in New Zealand North (even though User Assigned identities are).
This currently sits upon the current region:
The creation of federated identity credentials is currently not supported on user-assigned managed identities created in the following regions:
Malaysia South
New Zeland South
Note: Forgive the spelling. I have a PR on the docs site to resolve this (it's actually New Zealand North).
I was able to work around this issue by editing the terraform for the bootstrap locally (to deploy into another region - ie, Australia East) before being pushed to create the ADO project and service principals.
Proposed Solution (Required)
It may be great to offer a secondary region for User Assigned Managed Identities to allow people to be able to work around this issue if it were to occur, I am not sure of the root cause of why it's not available in NZN.
For NZN the following resources (mainstream) seem to be blockers (taking the longest time to rollout) for our region deployments:
DNS Resolver
Log Analytics Workspace
So it would be great to have the option to toggle or have a different region for this workloads as well as part of the bootstrap, but it is something we can work around, by editing the code once its in the repo, where the User Assigned Managed identity is more from a local bootstrap deployment.
Important Factoids (Optional)
No response
References (Optional)
No response
The text was updated successfully, but these errors were encountered:
Is there an existing issue for this?
Infrastructure as Code Type? (Required)
terraform
Starter Module? (Required)
bicep - complete
Use Case (Required)
When deploying to New Zealand North (new 3+0) region, made GA in December of 2025. We ran into an issue with Federated credentials not being available in New Zealand North (even though User Assigned identities are).
This currently sits upon the current region:
The creation of federated identity credentials is currently not supported on user-assigned managed identities created in the following regions:
Malaysia South
New Zeland South
Note: Forgive the spelling. I have a PR on the docs site to resolve this (it's actually New Zealand North).
Reference: Unsupported regions (user-assigned managed identities)
I was able to work around this issue by editing the terraform for the bootstrap locally (to deploy into another region - ie, Australia East) before being pushed to create the ADO project and service principals.
Proposed Solution (Required)
It may be great to offer a secondary region for User Assigned Managed Identities to allow people to be able to work around this issue if it were to occur, I am not sure of the root cause of why it's not available in NZN.
For NZN the following resources (mainstream) seem to be blockers (taking the longest time to rollout) for our region deployments:
So it would be great to have the option to toggle or have a different region for this workloads as well as part of the bootstrap, but it is something we can work around, by editing the code once its in the repo, where the User Assigned Managed identity is more from a local bootstrap deployment.
Important Factoids (Optional)
No response
References (Optional)
No response
The text was updated successfully, but these errors were encountered: