diff --git a/.github/workflows/artifacts.yml b/.github/workflows/artifacts.yml
index 9497b006a..30e3763e5 100644
--- a/.github/workflows/artifacts.yml
+++ b/.github/workflows/artifacts.yml
@@ -25,6 +25,9 @@ on:
         required: true
       gh_token:
         required: true
+permissions:
+  id-token: write
+  contents: read
 jobs:
   build_and_upload_mac:
     name: Mac Build & Upload
@@ -261,6 +264,7 @@ jobs:
           client-id: ${{ secrets.AZURE_CLIENT_ID }}
           tenant-id: ${{ secrets.AZURE_TENANT_ID }}
           subscription-id: ${{ secrets.AZURE_SUBSCRIPTION_ID }}
+          enable-AzPSSession: true
 
       - name: Sign dotnet artifacts
         uses: azure/trusted-signing-action@v0