How do I disable “alternate authentication credentials” in a VSTS account?
By default, your VSTS account allows access for all authentication methods, including alternate authentication credentials. VSTS administrators can limit access, but you must specifically restrict access for each method. When you deny access to an authentication method, no app can use that method to access your account. Any app that previously had access will get an authentication error and can't access your account.