When you use a service that's integrated with Visual Studio Team Services, we use the industry-standard OAuth 2.0 authorization framework to provide safe, secure access to your resources by those other services. With OAuth, you grant a service the authorization to access your Visual Studio Team Services resources such as work items, source code, build results.
Authorizations are bound to your credentials, so the service can use the authorization to access resources in any Visual Studio Team Services account that you have access to.
Use your Microsoft account (like
firstname.lastname@example.org) or your work account (your account in Azure AD - like
email@example.com) to authorize the service.
The service that you authorize never has access to your Visual Studio Team Services credentials.
Revoke any authorizations that you've granted to other services.
Authorize a service
A typical authorization flow might go like this:
You're using a service that uses Visual Studio Team Services resources, so the service requests authorization from Visual Studio Team Services.
If you're not already signed in, Visual Studio Team Services will prompt you for your credentials.
After you've signed in, you get the Visual Studio Team Services authorization approval page.
At this point in time, services can only request full access to all of the resources that are available to you through the REST APIs, so don't be surprised that the authorization request is not more specific.
You review the request and approve the authorization.
The authorized service uses that authorization to access resources in your Visual Studio account.
To ensure an authorization request is legitimate:
Look for the Visual Studio Team Services branding across the top of the authorization approval page.
Ensure the authorization approval page URL begins with
Pay attention to any HTTPS-related security warnings in your browser.
Remember that other services do not ask for your credentials directly. They let you provide them to Visual Studio Team Services through the Visual Studio Team Services authorization approval page.
To see the services that you've authorized to access your account, go to https://app.vssps.visualstudio.com/Profile/View and follow the Manage applications link.
You can revoke any authorizations here and the service will no longer be able to access your account on your behalf.