Docs: documentation on supported authentication is not current

[dtivel]

Documentation says:

However, vsce now supports other authentication strategies like managed identities.

[lszomoru]

@dtivel, we can certainly go ahead and update the vsce documentation to mention the --azure-credential flag, but we would also need to describe the steps on how to grant permissions to a managed identity to the Marketplace publisher. Does the Marketplace team have any documentation for that? Are there any 1st party docs that we can publish?

[object-Object]

For any end users attempting to set up publishing with --azure-credential and OIDC in GitHub Actions, I documented the steps I took to get it to work in this document: https://github.com/object-Object/vscode-hex-casting/blob/a658ed5565eac6f03101d53f5e0da616beada178/publishing.md

The corresponding GitHub Actions workflow is here (MIT license): https://github.com/object-Object/vscode-hex-casting/blob/a658ed5565eac6f03101d53f5e0da616beada178/.github/workflows/release.yml

Note that these steps are for a Microsoft Entra application / service principal. I was also able to get it working with a managed identity by following similar steps. However, for a managed identity, the only way I could find to get the Marketplace User ID was to run the release workflow, let it fail, and get the UUID from the error message, like in the following screenshot. With a service principal, you can just log in as the service principal and get the ID from the Profiles API.

Relevant documentation:

• https://docs.github.com/en/actions/how-tos/secure-your-work/security-harden-deployments/oidc-in-azure
• https://github.com/Azure/login#login-with-openid-connect-oidc-recommended (includes links to several other useful pages)
• https://learn.microsoft.com/en-us/azure/devops/extend/publish/command-line#publish-with-a-microsoft-entra-token-as-a-service-principal

[mariaghiondea]

@isidorn this one can be closed with microsoft/vscode-docs#9886