Tutorial: Set up an Azure DevOps connector in Azure SRE Agent

In this tutorial, you connect your agent to Azure DevOps so it can access repositories, wikis, and documentation during investigations. Choose OAuth for automatic token management or PAT for service account scenarios. When you finish this tutorial, your agent has authenticated access to an Azure DevOps organization and can read repositories, create work items, and correlate code changes with incidents.

Estimated time: 5 minutes

In this tutorial, you:

Prerequisites

• An agent created in the Azure SRE Agent portal
• A Microsoft Entra ID account with access to your Azure DevOps organization
• SRE Agent Administrator or Standard User role on the agent

Navigate to connectors

Open the connectors page where you can add and manage your agent's external connections.

1. Open your agent in the Azure SRE Agent portal.
2. In the left sidebar, expand Builder.
3. Select Connectors.

The connectors list shows any existing connectors for your agent.

Add an Azure DevOps OAuth connector

Select the Azure DevOps OAuth connector type from the wizard.

1. Select Add connector in the toolbar.
2. In Add a connector, select Azure DevOps OAuth connector.
3. Select Next.

Configure the connector

The setup form has three fields: name, organization, and authentication method.

Name

Enter a name for this connector. The name must:

• Start with a letter
• Contain only letters, numbers, and hyphens
• Be 4-64 characters long

Example: ado-contoso or my-org-connector

Organization

Enter your Azure DevOps organization name, which is the part after dev.azure.com/ in your URL.

For example, if your URL is https://dev.azure.com/contoso, enter contoso.

The organization name must:

• Start with a letter or digit
• Contain only letters, numbers, and hyphens
• Be up to 255 characters long
• Be unique among your existing Azure DevOps OAuth connectors

Authentication method

Choose how your agent authenticates to Azure DevOps:

Sign in with user account (OAuth)

If you select User account, complete OAuth authentication by using your Microsoft Entra ID credentials.

1. Select Sign in to Azure DevOps.
2. An Authorize Azure DevOps consent dialog appears, listing the permissions your agent needs:
   • Read and write access to repositories and projects
   • Act on behalf of the signed-in user
3. Select Authorize to grant access.
4. On success, you see Connected to Azure DevOps with a green checkmark.

Checkpoint: The Connected to Azure DevOps card appears with a green checkmark. If you see an error instead, check that your Microsoft Entra ID account has access to the specified organization.

Use managed identity (alternative)

If you select Managed identity, configure the identity your agent uses for unattended authentication.

1. Select a managed identity from the dropdown (system-assigned or user-assigned).
2. If your Azure DevOps organization is in a different Microsoft Entra ID tenant, configure the Federated Identity Credential (FIC) fields for cross-tenant authentication.
3. Proceed to the review step.

Managed identity works well for production agents that need persistent, unattended access without user interaction. The agent authenticates by using the managed identity credential directly, with no user sign-in required.

Review and add

Confirm the connector details and create the connector.

1. Select Next to proceed to the review step.
2. Verify the connector details:
   • Name: your chosen name
   • Organization: your Azure DevOps organization
   • Type: Azure DevOps OAuth
3. Select Add connector to create the connector.

Your connector now appears in the connectors list with a Connected status indicator.

Verify access

Test that your agent can access your Azure DevOps repositories.

Ask your agent:

What repositories are available in my Azure DevOps organization?

Or, for a specific check:

Show me recent commits in the payment-service repository.

Alternative: Set up with PAT authentication

If your team uses Personal Access Tokens (PATs) instead of OAuth, use the Documentation connector for Azure DevOps.

1. When adding a connector, select Documentation connector (Azure DevOps) instead of Azure DevOps OAuth connector.
2. Select Next.
3. Enter a Name and your Azure DevOps URL (repository or wiki URL).
4. Under Authentication method, select Personal Access Token (PAT).
5. Enter your Azure DevOps PAT in the secure input field.
6. Select Next to review, and then select Add.

Your PAT is stored securely and you can't retrieve it after saving. The connector tests connectivity before saving. If the PAT lacks the required vso.code scope, the connector creation fails with a clear error message.

The following URL formats are accepted:

• https://dev.azure.com/{org}/{project}/_git/{repo}
• https://{org}.visualstudio.com/{project}/_git/{repo}
• Wiki URLs: https://dev.azure.com/{org}/{project}/_wiki/wikis/{wiki}

Edit or remove a connector

You can modify or delete existing connectors from the connectors list.

Edit

1. In the connectors list, select the ⋮ (more actions) menu on the connector row.
2. Select Edit connector.
3. The edit dialog opens with your current settings. Modify the organization, reauthenticate, or change the managed identity.
4. Select Save.

Delete

To remove a single connector:

1. Select ⋮ on the connector row, and then select Delete connector.
2. Confirm the deletion.

To remove multiple connectors at once:

1. Select connectors by using the checkboxes in the grid.
2. Select Remove in the toolbar.
3. Confirm in the deletion dialog.

Troubleshooting

Use the following information to resolve common errors when setting up an Azure DevOps connector.

Summary

In this tutorial, you learned how to:

• Add an Azure DevOps connector by using OAuth or managed identity authentication
• Understand the difference between OAuth (autorefreshing) and PAT (manually managed) authentication
• Verify that your agent can access your Azure DevOps repositories
• Set up PAT authentication through the documentation connector
• Set up multiple connectors for different organizations

Next step

Related content

• Connect source code
• Azure DevOps wiki knowledge
• Connectors