Which OIDC feature must be enabled on AKS to support Workload Identity?
- A AAD integration
- B OIDC Issuer endpoint (--enable-oidc-issuer) (correct answer)
- C Service Principal authentication
- D Managed Identity endpoint
Shortcut: Workload Identity requires the OIDC issuer to be enabled on the AKS cluster (--enable-oidc-issuer). This exposes the cluster's OIDC discovery endpoint for token federation.