Using AAD Managed identity to connect to DevOps API

Question

Hi All

We are trying to integrate a part of our system with Azure DevOps, specifically logging Tasks (Bugs, Issues, etc) from our code.

The code is all running in Azure and as standard we use AAD service principles authenticated with Managed Identity to connect to secured entities.

Looking at the documentation around connection methods to the API seems to mean that we would need to stash credentials, probably a PAT at our end, but we would ideally like to keep consistent and use MSI.

If anyone could provide any guidance it would be much appreciated.

All the best

Mark Middlemist

Answer 1

Onlye delegated (user but not app) permissions are supported by Azure AD DevOps API. You can keep using PAT's and protect them using Key Vault and Managed Identies.