Use authentication with FC for localization pipeline (#2192)

* use fc

* only create patch on main

build/pipelines/azure-pipelines.loc.yaml

@@ -5,8 +5,6 @@
 # resources to run.
 #
 
-# Expects a variable called LocServiceKey to contain the OAuth client secret for Touchdown.
-
 schedules:
 - cron: "0 5 * * *"
   displayName: Daily sync
@@ -20,6 +18,9 @@ pr: none
 
 name: $(BuildDefinitionName)_$(date:yyMM).$(date:dd)$(rev:rrr)
 
+variables:
+  isMainBranch: ${{ eq(variables['Build.SourceBranch'], 'refs/heads/main') }}
+
 jobs:
 - job: Localize
   pool:
@@ -30,15 +31,18 @@ jobs:
   - checkout: self
     clean: true
 
-  - task: MicrosoftTDBuild.tdbuild-task.tdbuild-task.TouchdownBuildTask@2
+  - task: MicrosoftTDBuild.tdbuild-task.tdbuild-task.TouchdownBuildTask@4
     displayName: Send resources to Touchdown Build
     inputs:
       teamId: 86
-      TDBuildServiceConnection: EE-TDBuild-Localization
+      authType: FederatedIdentity
+      FederatedIdentityServiceConnection: EE-TDBuild-Localization-FC
       isPreview: false
       relativePathRoot: src/Calculator/Resources/en-US/
       resourceFilePath: '*.resw'
       outputDirectoryRoot: src/Calculator/Resources/
+      ${{ if eq(variables['isMainBranch'], false) }}:
+        localizationTarget: false
 
   - script: |
       cd $(Build.SourcesDirectory)
@@ -50,7 +54,7 @@ jobs:
 
   - task: PublishPipelineArtifact@0
     displayName: Publish patch file as artifact
-    condition: eq(variables['hasChanges'], '1')
+    condition: and(eq(variables['hasChanges'], '1'), eq(variables['isMainBranch'], true))
     inputs:
       artifactName: Patch
       targetPath: $(Build.ArtifactStagingDirectory)