OAuth 2.0 Client Credentials Flow for Azure DevOps connector

Targetprocess integration profile setup:

1. Go to the Targetprocess settings and open Integrations in the left panel.
2. Click +Add on a Azure DevOps profile.
3. Fill in Azure DevOps organization URL, e.g. https://dev.azure.com/yourorganization
4. Choose OAuth 2.0 Client Credentials in the Select authentication method.
5. Fill the fields to setup OAuth 2.0 flow. In case of using Microsoft Entra as a provider fields should be filled according to the follows:

Client ID – Application (client) ID

Client Secret –  Client secret generated for the application in the Microsoft Entra

Authorization service URL –  https://login.microsoftonline.com/{tenantId}/oauth2/v2.0/token, where {tenantId} is the Directory (tenant) ID from Microsoft Entra for the registered application

Scopes:  499b84ac-1321-427f-aa17-267ca6975798/.default  

This is hardcoded scoped to request an access to Azure DevOps. This GUID is always the same for Azure DevOps.

App registration in Microsoft Entra

1. Go to Microsoft Entra and navigate Identity -> Applications -> App registrations
2. Click the + New registration button and fill in the application information. The Redirect URI field can be left blank.
3. Open the newly registered application page and go to Certificates & secrets in the left panel.
4. Select Client secrets tab and click + New client secret. Fill in the necessary fields and store the generated client secret, as it will be used for the integration profile setup in Targetprocess.
5. Go to API permissions in the left panel menu and add the following list of permissions for Azure DevOps: vso.identity, vso.work, vso.build, vso.code, vso.profile, vso.project, vso.work_write
6. Return to the Overview tab in the left panel and store the following information needed to set up the integration profile in Targetprocess: Directory (tenant) ID, Application (client) ID, and Client Secret from step 4.

Azure DevOps configuration

1. Go to Organization settings and open the Users tab in the left panel.
2. Click Add users button and select service principal for the application that is registered previously in the Microsoft Entra. Assign the selected service principal to the projects that will be synchronized with the Targetprocess. The service principal should be assigned to the Project Administrators group to make synchronization works correctly.