Azure DevOps

Azure DevOps is a Microsoft product that provides version control, reporting, requirements management, project management, automated builds, testing and release management capabilities.

Types of Assets Fetched

This adapter fetches the following types of assets:

• Users
• Activities
• Application Resources

Parameters

To connect the adapter, you can either authenticate with a personal access token or with a service principal.
Refer to Required Permissions for the permissions relevant to each authentication method.

Authenticating with a Personal Access Token

The following parameters are required:

1. Organization - The organization name defined in the customer’s DevOps account.
2. Token Name - The name of the token you want to use.
3. Personal Access Token - The personal access token to access the Azure Devops. Refer to Use personal access tokens.

Authenticating with a Service Principal

The following parameters are required.

1. Organization - The organization name defined in the customer’s DevOps account.
2. Azure Client ID -The Application ID of the Axonius application.
3. Azure Client Secret - Specify a non-expired key generated from the new client secret.
4. Azure Tenant ID - The ID for Microsoft Entra ID.
5. Cloud Environment - Select your Microsoft Azure or Microsoft Entra ID cloud environment type.

For additional information, refer to Use service principals & managed identities in Azure DevOps.

Additional Parameters

These parameters are optional and can be added to any authentication method.

1. Domain or IP - The hostname or IP address of the Azure DevOps server. The default is https://vssps.dev.azure.com/.
2. Port - If not supplied, Axonius will use TCP port 443.
3. API Version - Select the API version. The default is 6.1-preview.1.4.
4. Verify SSL - Select whether to verify the SSL certificate of the server against the CA database inside of Axonius. For more details, see SSL Trust & CA Settings.
5. HTTPS Proxy - Connect the adapter to a proxy instead of directly connecting it to the value supplied in Organization.
6. HTTPS Proxy User Name - The user name to use when connecting to the value supplied in Organization via the value supplied in HTTPS Proxy.
7. HTTPS Proxy Password - The password to use when connecting to the value supplied in Organization via the value supplied in HTTPS Proxy.

To learn more about common adapter connection parameters and buttons, see Adding a New Adapter Connection.

Advanced Settings

1. Fetch Groups of Each User - Select this option to fetch memberships of users in groups.
2. Fetch Git Repositories - Select this option to fetch the Git Repositories from the projects in Azure DevOps.
3. Fetch Git Commits from the last X days (optional) - Use the arrows on the right to set the day count.
4. Fetch Users' Projects - Select this option to fetch all projects of all users. The results can be viewed under Assets > Users > Projects field (add it to the table if it is not there). You can also go to a user's profile and view the Projects field of that specific user.

APIs

Axonius uses the Azure DevOps Services REST API 6.1.

Required Permissions

• The values supplied in Token Name and Personal Access Token refer to a generated personal access token (PAT) used to authenticate into Azure DevOps that has permission to read, write and manage work items. For details, see Azure DevOps - Create a personal access token (PAT).
• The values supplied in Azure Client ID, Azure Client Secret, Azure Tenant ID and Cloud Environment must have permission to read, write and manage work items. For details, see Add a service principal to an Azure DevOps organization.

Version Matrix

This adapter has only been tested with the versions marked as supported, but may work with other versions. Please contact Axonius Support if you have a version that is not listed and it is not functioning as expected.

Related Enforcement Actions

• Microsoft Azure DevOps - Create Task
• Microsoft Azure DevOps - Update Task