Title: App Registration Federated Credentials Using Custom Claim Expression Causes Internal Server Error · Issue #1359 · microsoftgraph/msgraph-sdk-python · GitHub
Open Graph Title: App Registration Federated Credentials Using Custom Claim Expression Causes Internal Server Error · Issue #1359 · microsoftgraph/msgraph-sdk-python
X Title: App Registration Federated Credentials Using Custom Claim Expression Causes Internal Server Error · Issue #1359 · microsoftgraph/msgraph-sdk-python
Description: Describe the bug I am attempting to filter through all of my App Registrations that have Federated Credentials configured, but am getting an Internal Server Error from the API whenever a credential uses the Claim Matching Expressions fun...
Open Graph Description: Describe the bug I am attempting to filter through all of my App Registrations that have Federated Credentials configured, but am getting an Internal Server Error from the API whenever a credential...
X Description: Describe the bug I am attempting to filter through all of my App Registrations that have Federated Credentials configured, but am getting an Internal Server Error from the API whenever a credential...
Opengraph URL: https://github.com/microsoftgraph/msgraph-sdk-python/issues/1359
X: @github
Domain: github.com
{"@context":"https://schema.org","@type":"DiscussionForumPosting","headline":"App Registration Federated Credentials Using Custom Claim Expression Causes Internal Server Error","articleBody":"### Describe the bug\n\nI am attempting to filter through all of my App Registrations that have Federated Credentials configured, but am getting an Internal Server Error from the API whenever a credential uses the Claim Matching Expressions functionality instead of an explicit subject value. For example, this is a problematic credential for the API:\n\n\u003cimg width=\"891\" height=\"753\" alt=\"Image\" src=\"https://github.com/user-attachments/assets/34e8d010-5469-406d-90b0-04135704fccb\" /\u003e\n\nThis results in the following response data from the API which the SDK cannot handle properly as it's not valid JSON:\n```json\n{\n \"@odata.context\":\"https://graph.microsoft.com/v1.0/$metadata#applications('\u003capplication id\u003e')/federatedIdentityCredentials\",\n \"value\":[\n {\n \"id\":\"\u003ccredential id\u003e\",\n \"name\":\"debug_v2\",\n \"issuer\":\"https://token.actions.githubusercontent.com\"{\"error\":{\"code\":\"InternalServerError\",\"message\":\"The property 'subject[Nullable=False]' of type 'Edm.String' has a null value, which is not allowed.\",\"innerError\":{\"date\":\"2025-09-17T21:05:59\",\"request-id\":\"f1ffe8e1-f229-4ba1-83e6-69c64046e4a5\",\"client-request-id\":\"f1ffe8e1-f229-4ba1-83e6-69c64046e4a5\"}}}\n```\n\nYou'll note that the `value` attribute _would_ contain multiple other credentials (there are 3 on this app registration), but because of this error they're not visible at all. I don't think this is an issue with the SDK specifically, rather the Graph API it's using, but this seems like a reasonable place to report the issue since it's preventing SDK functionality from working properly.\n\n### Expected behavior\n\nClaims matching expressions are supported in the JSON response for Federated Credentials\n\n### How to reproduce\n\n```python\nGraphServiceClient(credentials=\u003ccredential\u003e).applications.by_application_id(app_object_id).federated_identity_credentials.get()\n``` \nwhere the app registration being queried has at least 1 federated credential using the \"claims matching expression\" feature.\n\n### SDK Version\n\n1.2.0\n\n### Latest version known to work for scenario above?\n\n_No response_\n\n### Known Workarounds\n\nHaven't been able to find a way around other than finding the data manually through the portal\n\n### Debug output\n\n\u003cdetails\u003e\u003csummary\u003eClick to expand log\u003c/summary\u003e\n```\n\n\u003cLog output here\u003e\n\n```\n\u003c/details\u003e\n\n\n### Configuration\n\n_No response_\n\n### Other information\n\n_No response_","author":{"url":"https://github.com/brett-swan-sh","@type":"Person","name":"brett-swan-sh"},"datePublished":"2025-09-17T21:28:35.000Z","interactionStatistic":{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":0},"url":"https://github.com/1359/msgraph-sdk-python/issues/1359"}
| route-pattern | /_view_fragments/issues/show/:user_id/:repository/:id/issue_layout(.:format) |
| route-controller | voltron_issues_fragments |
| route-action | issue_layout |
| fetch-nonce | v2:b821d86e-35b6-33b2-5218-432f2cdeedf2 |
| current-catalog-service-hash | 81bb79d38c15960b92d99bca9288a9108c7a47b18f2423d0f6438c5b7bcd2114 |
| request-id | 977A:2D5677:39FCB:50B29:69693E7A |
| html-safe-nonce | bf0620558252b1b4383fa4715f55cc5faee7d7b2f21b0738faee171460a7d0c0 |
| visitor-payload | eyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiI5NzdBOjJENTY3NzozOUZDQjo1MEIyOTo2OTY5M0U3QSIsInZpc2l0b3JfaWQiOiI1ODI2OTA3MTY3ODkyNTIwNTcwIiwicmVnaW9uX2VkZ2UiOiJpYWQiLCJyZWdpb25fcmVuZGVyIjoiaWFkIn0= |
| visitor-hmac | dade15d285b59d825f4bcfe8952d3463bd1879834f1a66d70e2dfc49fafceaf2 |
| hovercard-subject-tag | issue:3427854228 |
| github-keyboard-shortcuts | repository,issues,copilot |
| google-site-verification | Apib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I |
| octolytics-url | https://collector.github.com/github/collect |
| analytics-location | / |
| fb:app_id | 1401488693436528 |
| apple-itunes-app | app-id=1477376905, app-argument=https://github.com/_view_fragments/issues/show/microsoftgraph/msgraph-sdk-python/1359/issue_layout |
| twitter:image | https://opengraph.githubassets.com/77490d744cb51bbb03adf855d0a636dbbb867953f8ff78e745853765bff1b78f/microsoftgraph/msgraph-sdk-python/issues/1359 |
| twitter:card | summary_large_image |
| og:image | https://opengraph.githubassets.com/77490d744cb51bbb03adf855d0a636dbbb867953f8ff78e745853765bff1b78f/microsoftgraph/msgraph-sdk-python/issues/1359 |
| og:image:alt | Describe the bug I am attempting to filter through all of my App Registrations that have Federated Credentials configured, but am getting an Internal Server Error from the API whenever a credential... |
| og:image:width | 1200 |
| og:image:height | 600 |
| og:site_name | GitHub |
| og:type | object |
| og:author:username | brett-swan-sh |
| hostname | github.com |
| expected-hostname | github.com |
| None | 54182691a21263b584d2e600b758e081b0ff1d10ffc0d2eefa51cf754b43b51d |
| turbo-cache-control | no-preview |
| go-import | github.com/microsoftgraph/msgraph-sdk-python git https://github.com/microsoftgraph/msgraph-sdk-python.git |
| octolytics-dimension-user_id | 17304259 |
| octolytics-dimension-user_login | microsoftgraph |
| octolytics-dimension-repository_id | 534665999 |
| octolytics-dimension-repository_nwo | microsoftgraph/msgraph-sdk-python |
| octolytics-dimension-repository_public | true |
| octolytics-dimension-repository_is_fork | false |
| octolytics-dimension-repository_network_root_id | 534665999 |
| octolytics-dimension-repository_network_root_nwo | microsoftgraph/msgraph-sdk-python |
| turbo-body-classes | logged-out env-production page-responsive |
| disable-turbo | false |
| browser-stats-url | https://api.github.com/_private/browser/stats |
| browser-errors-url | https://api.github.com/_private/browser/errors |
| release | d69ac0477df0f87da03b8b06cebd187012d7a930 |
| ui-target | full |
| theme-color | #1e2327 |
| color-scheme | light dark |
Links:
Viewport: width=device-width