Azure DevOps Troubleshooting and Validation
This section provides procedures to validate and troubleshoot your Azure DevOps integration with SailPoint Entro.
Navigation Path
Management → Accounts & Integrations → Azure DevOps → Troubleshooting and Validation
Validation Steps
-
Verify Status: In the SailPoint Entro Console, go to Management → Accounts & Integrations → Azure DevOps and confirm the status is
Verified. -
Sync Timestamp: Verify the last sync timestamp on the integration card to ensure continuous monitoring.
-
Check Inventory: Confirm that your Azure DevOps projects and users appear in the Activity Logs or Inventory view.
Common Issues and Resolutions
| Issue | Possible Cause | Resolution |
|---|---|---|
| Status: Unauthorized / 401 | The Client Secret has expired, or the App Registration was not added to the Azure DevOps organization | Check the secret expiration in Entra ID. Ensure the "Entro App" is listed under Organization Settings → Users in Azure DevOps |
| Empty Project List | The service principal was added to the organization but not assigned to specific projects | In Azure DevOps, go to Users, select the Entro App, and ensure it is added to the relevant projects with the Project Readers group |
| Token Generation Failure | Incorrect Tenant ID or Client ID | Validate the credentials by manually calling the Microsoft Identity token endpoint: https://login.microsoftonline.com/<tenant_id>/oauth2/v2.0/token |
Support: If issues persist, please contact SailPoint Entro Support at support@entro.security or through your dedicated Slack/Teams channel.
Security & Compliance Notes
- All operations occur over HTTPS/TLS 1.2+
- SailPoint Entro performs read-only operations; no data is modified
- Client secret can be revoked anytime via the SailPoint Entro application in Entra ID