GeezerVisonThe World Wide Web, restored to 800 pixels of glory. |
| Home|About|Gaming cabinet|Archives|How it works|Starter sites |
GeezerVison is showing github.com — App Registration Federated Credentials Using Custom Claim Expression Causes Internal Server Error · Issue #1359 · microsoftgraph/msgraph-sdk-python Open Labels DescriptionDescribe the bugI am attempting to filter through all of my App Registrations that have Federated Credentials configured, but am getting an Internal Server Error from the API whenever a credential uses the Claim Matching Expressions functionality instead of an explicit subject value. For example, this is a problematic credential for the API:
This results in the following response data from the API which the SDK cannot handle properly as it's not valid JSON: {
"@odata.context":"https://graph.microsoft.com/v1.0/$metadata#applications('<application id>')/federatedIdentityCredentials",
"value":[
{
"id":"<credential id>",
"name":"debug_v2",
"issuer":"https://token.actions.githubusercontent.com"{"error":{"code":"InternalServerError","message":"The property 'subject[Nullable=False]' of type 'Edm.String' has a null value, which is not allowed.","innerError":{"date":"2025-09-17T21:05:59","request-id":"f1ffe8e1-f229-4ba1-83e6-69c64046e4a5","client-request-id":"f1ffe8e1-f229-4ba1-83e6-69c64046e4a5"}}}You'll note that the Expected behaviorClaims matching expressions are supported in the JSON response for Federated Credentials How to reproduceGraphServiceClient(credentials=<credential>).applications.by_application_id(app_object_id).federated_identity_credentials.get() where the app registration being queried has at least 1 federated credential using the "claims matching expression" feature. SDK Version1.2.0 Latest version known to work for scenario above?No response Known WorkaroundsHaven't been able to find a way around other than finding the data manually through the portal Debug outputClick to expand log```Activity
MetadataMetadataAssigneesLabelsTypeProjectsMilestoneRelationshipsDevelopmentIssue actions |
| You are visitor 01402503 — GeezerVison does not store the pages you look up. Best viewed with Netscape Navigator 4.7 or Internet Explorer 6 at 800×600. No cookies required. |