Skip to content

Configuring the Azure DevOps Connector

To connect Azure DevOps to Agentic Fabric, you'll register an application in Microsoft Entra ID and add the service principal to Azure DevOps. This will allow Agentic Fabric to discover Azure DevOps credentials and aggregate them as non-human identities.

Important

If your organization has already configured an Azure DevOps SaaS source, you can use the existing source for agent discovery. The fields will be prepopulated with the source's information. You can edit these fields to configure a new integration.

Registering an Application in Microsoft Entra ID

  1. Follow Microsoft's product documentation to register an application. On the Application page, note the Application (client) ID. You'll provide this value to connect Azure DevOps and Agentic Fabric.
  2. Generate a client secret for the application.
  3. Copy the application's client secret. You'll provide this value to connect Microsoft Entra ID and Agentic Fabric.

Adding the Application Service Principal to Azure DevOps

The Microsoft Entra ID application service principal must be added as a user to the Azure DevOps organization and granted the permissions required for aggregation and provisioning.

  1. Add the service principal as a user to the Azure DevOps organization. For more information, refer to Microsoft's product documentation.

  2. Grant the service principal the minimum permissions for the operations you plan to use:

    Operations Minimum Permissions
    Test connection and user and group aggregation Organization-level member (Basic access)
    Membership aggregation Organization-level read (Graph API access)
    Provisioning - Add or remove group members Project Collection Administrators

Connecting Azure DevOps to Agentic Fabric

  1. Go to the Connect Source step of the Agentic Fabric onboarding experience.
  2. Select Azure DevOps from the left pane.

  3. In the Azure DevOps section, complete the following:

    • In the Source Name field, enter a unique name for the source.

    • In the Source Owner field, select the identity who will own the source.

    • In the Description field, enter a unique description for the source to distinguish it from similar connections.

  4. In the Configure Authentication section, complete the following:

    • In the Grant Type dropdown list, select Client Credentials.

    • In the Base URL field, enter the base URL for your organization's Azure DevOps system. SailPoint recommends using HTTPS for a secure connection.

    • In the Organization Name field, enter the name of your Azure DevOps organization.

    • In the Client ID field, enter the Application ID (client ID) for the Microsoft Entra ID application.

    • In the Client Secret field, enter the value for the client secret you generated.

    • In the Domain Name field, enter the name of the Microsoft Entra ID domain to be managed.

  5. Select Test Connection to ensure the connection is successful.

  6. If the test is successful, select Aggregate to run an aggregation for the source. Select Exit to skip this step. You can configure aggregations for the source's datasets later in the source's configuration. For information on the datasets specific to Azure DevOps, refer to the Azure DevOps connector documentation.

    A Completed status is now displayed next to the source in the left panel.

  7. Choose another connector to configure or select Continue to proceed to the next onboarding step.

Documentation Feedback

Feedback is provided as an informational resource only and does not form part of SailPoint’s official product documentation. SailPoint does not warrant or make any guarantees about the feedback (including without limitation as to its accuracy, relevance, or reliability). All feedback is subject to the terms set forth at https://developer.sailpoint.com/discuss/tos.