{"id":1301,"date":"2014-05-21T07:07:24","date_gmt":"2014-05-21T07:07:24","guid":{"rendered":"https:\/\/blogs.msdn.microsoft.com\/bharry\/2014\/05\/21\/visual-studio-online-update-may-20th\/"},"modified":"2024-03-20T14:52:34","modified_gmt":"2024-03-20T21:52:34","slug":"visual-studio-online-update-may-20th","status":"publish","type":"post","link":"https:\/\/devblogs.microsoft.com\/bharry\/visual-studio-online-update-may-20th\/","title":{"rendered":"Visual Studio Online Update \u2013 May 20th"},"content":{"rendered":"<p>This week we are deploying our sprint 65 work.\u00a0 You can read the release notes here: <a title=\"http:\/\/www.visualstudio.com\/news\/2014-may-20-vso\" href=\"http:\/\/www.visualstudio.com\/news\/2014-may-20-vso\">http:\/\/www.visualstudio.com\/news\/2014-may-20-vso<\/a><\/p>\n<p>The really big news is that we\u2019ve completed the next step in the journey to fully supporting Active Directory integration through Azure Active Directory.\u00a0 You can now create a new VS Online account through any of the paths we offer and connect the new account to Azure Active Directory in the process.\u00a0 The news post has a bunch more detail, tutorials, etc.<\/p>\n<ul>\n<li><a href=\"http:\/\/go.microsoft.com\/fwlink\/?LinkId=307137&amp;clcid=0x409\">Visual Studio.com<\/a><\/li>\n<li><a href=\"https:\/\/manage.windowsazure.com\">Current Azure portal<\/a><\/li>\n<li><a href=\"http:\/\/portal.azure.com\/\">V.Next Azure portal<\/a><\/li>\n<\/ul>\n<p>This has been one of the top service requests for a while now.\u00a0 In fact, there are two highly voted Uservoice items related to it that we\u2019ve partially addressed.<\/p>\n<p><a href=\"https:\/\/devblogs.microsoft.com\/bharry\/wp-content\/uploads\/sites\/8\/2014\/05\/6013.image_thumb_5C35FBF6.png\"><img decoding=\"async\" class=\"alignnone size-full wp-image-15755\" src=\"https:\/\/devblogs.microsoft.com\/bharry\/wp-content\/uploads\/sites\/8\/2014\/05\/6013.image_thumb_5C35FBF6.png\" alt=\"Image 6013 image thumb 5C35FBF6\" width=\"802\" height=\"153\" srcset=\"https:\/\/devblogs.microsoft.com\/bharry\/wp-content\/uploads\/sites\/8\/2014\/05\/6013.image_thumb_5C35FBF6.png 802w, https:\/\/devblogs.microsoft.com\/bharry\/wp-content\/uploads\/sites\/8\/2014\/05\/6013.image_thumb_5C35FBF6-300x57.png 300w, https:\/\/devblogs.microsoft.com\/bharry\/wp-content\/uploads\/sites\/8\/2014\/05\/6013.image_thumb_5C35FBF6-768x147.png 768w\" sizes=\"(max-width: 802px) 100vw, 802px\" \/><\/a><\/p>\n<p><a href=\"https:\/\/devblogs.microsoft.com\/bharry\/wp-content\/uploads\/sites\/8\/2014\/05\/0160.image_thumb_32C1BAB6.png\"><img decoding=\"async\" class=\"alignnone size-full wp-image-15756\" src=\"https:\/\/devblogs.microsoft.com\/bharry\/wp-content\/uploads\/sites\/8\/2014\/05\/0160.image_thumb_32C1BAB6.png\" alt=\"Image 0160 image thumb 32C1BAB6\" width=\"802\" height=\"115\" srcset=\"https:\/\/devblogs.microsoft.com\/bharry\/wp-content\/uploads\/sites\/8\/2014\/05\/0160.image_thumb_32C1BAB6.png 802w, https:\/\/devblogs.microsoft.com\/bharry\/wp-content\/uploads\/sites\/8\/2014\/05\/0160.image_thumb_32C1BAB6-300x43.png 300w, https:\/\/devblogs.microsoft.com\/bharry\/wp-content\/uploads\/sites\/8\/2014\/05\/0160.image_thumb_32C1BAB6-768x110.png 768w\" sizes=\"(max-width: 802px) 100vw, 802px\" \/><\/a><\/p>\n<p>There\u2019s actually a ton more work that we\u2019ve had to do to get to this point than you might imagine.\u00a0 It\u2019s not just about hooking up another authentication provider.\u00a0 We\u2019ve tried to make the whole scenario work well.\u00a0 For instance.<\/p>\n<ul>\n<li>MSDN subscriber benefits \u2013 Once you can login to VS Online with your corporate credentials, how are we going to recognize your MSDN subscription and give you credit for the license?\u00a0 We\u2019ve had to add support to MSDN\/VSO to enable you to specify a set of AAD credentials associated with your MSDN subscription by which you can get credit.<\/li>\n<li>Interplay between AAD and Microsoft Accounts \u2013 Microsoft Accounts (Live IDs) can be added to AAD as \u201cexternal identities&#8221;, making them kind of virtual members of the directory.\u00a0 That creates all kinds of problems.\u00a0 It means that with the same Microsoft Account, you can be a member of multiple organizations.\u00a0 How do you see all of the VSO accounts in all of those organizations you have access to?\u00a0 We\u2019ve updated the profile page to round them all up and show them.\u00a0 What about the fact that you only have one user profile \u2013 display name, picture, etc?\u00a0 Many organizations want to control things like that with policy in their organization.\u00a0 We\u2019ve added support for organization specific profiles.\u00a0 So the profile is yours but it has a \u201cpersonality\u201d specific to each organization you are a member of.<\/li>\n<\/ul>\n<p>There have been tons of edges like these that we\u2019ve had to deal with.\u00a0 The whole process has given me a renewed appreciation for how much more complicated identity is than you would, at first, imagine.<\/p>\n<h3>What you can\u2019t do\u2026<\/h3>\n<p>As I said, this is a step on the journey.\u00a0 There\u2019s lots you can\u2019t do yet.\u00a0 By far the biggest and most important one is that you can\u2019t attach an existing VSO account to an AAD directory.\u00a0 You can only do it while creating a new account.\u00a0 Enabling attaching existing accounts is the next scenario on our list and, last I checked, we were estimating about 3 more sprints of work to get that done.<\/p>\n<p>I know what you are thinking\u2026\u00a0 How can I create a new account, move all my stuff over to the new account and keep working?\u00a0 Stop.\u00a0 Don\u2019t go there.\u00a0 It\u2019s complicated.\u00a0 If you just want to sync your source, create a new account and check it in \u2013 basically starting over, go ahead.\u00a0 But if you hope to preserve history, work items, tests, etc.\u00a0 Don\u2019t.\u00a0 Just wait a few sprints and we\u2019ll enable you to add AAD.\u00a0 Down the other path, you\u2019ll pull out half your hair and probably be done about the time we introduce the feature anyway.<\/p>\n<p>There are other things that still need to get done beyond that.\u00a0 For instance, once you can attach AAD to your VSO account, you will be able to add your Microsoft Accounts as external identities to your AAD and keep working.\u00a0 However, some of you, maybe most of you, would sure like to be able to move all of your work from your Microsoft Account to your linked on-premises AD identity \u2013 so for example, change <a href=\"mailto:bharry_msft@hotmail.com\">bharry_msft@hotmail.com<\/a> to <a href=\"mailto:bharry@microsoft.com\">bharry@microsoft.com<\/a>.\u00a0 We have yet more work to do to enable that and I don\u2019t have a timeline but likely later this year.\u00a0 You will also want to be able to use your Active Directory groups to manage permissions (and other things) in VSO \u2013 also likely to happen later this year.<\/p>\n<p>So, this is not the end but rather it is an important step.<\/p>\n<p>As I said, I\u2019ve found that identity is way more complicated than you\u2019d expect and I\u2019ve found that our current docs are not great at telling you everything you need to know.\u00a0 I\u2019ve asked that we put together a one stop shop page that contains a good explanation, links to resources and an FAQ to really help people sort through it all and create a solution that works well for them.\u00a0 I\u2019ll let you know as soon as we have it.<\/p>\n<p>It\u2019s an incredibly exciting step and I think once we get the next step (ability to support pre-existing VSO accounts), we\u2019ll cover the most pressing needs.\u00a0 We\u2019ll finish this out and start ramping up on the next most pressing requirement \u2013 process template customization.<\/p>\n<p>Thanks,<\/p>\n<p>Brian<\/p>\n","protected":false},"excerpt":{"rendered":"<p>This week we are deploying our sprint 65 work.\u00a0 You can read the release notes here: http:\/\/www.visualstudio.com\/news\/2014-may-20-vso The really big news is that we\u2019ve completed the next step in the journey to fully supporting Active Directory integration through Azure Active Directory.\u00a0 You can now create a new VS Online account through any of the paths [&hellip;]<\/p>\n","protected":false},"author":244,"featured_media":14617,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[1],"tags":[8],"class_list":["post-1301","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-uncategorized","tag-vsonline"],"acf":[],"blog_post_summary":"<p>This week we are deploying our sprint 65 work.\u00a0 You can read the release notes here: http:\/\/www.visualstudio.com\/news\/2014-may-20-vso The really big news is that we\u2019ve completed the next step in the journey to fully supporting Active Directory integration through Azure Active Directory.\u00a0 You can now create a new VS Online account through any of the paths [&hellip;]<\/p>\n","_links":{"self":[{"href":"https:\/\/devblogs.microsoft.com\/bharry\/wp-json\/wp\/v2\/posts\/1301","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/devblogs.microsoft.com\/bharry\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/devblogs.microsoft.com\/bharry\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/bharry\/wp-json\/wp\/v2\/users\/244"}],"replies":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/bharry\/wp-json\/wp\/v2\/comments?post=1301"}],"version-history":[{"count":0,"href":"https:\/\/devblogs.microsoft.com\/bharry\/wp-json\/wp\/v2\/posts\/1301\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/bharry\/wp-json\/wp\/v2\/media\/14617"}],"wp:attachment":[{"href":"https:\/\/devblogs.microsoft.com\/bharry\/wp-json\/wp\/v2\/media?parent=1301"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/bharry\/wp-json\/wp\/v2\/categories?post=1301"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/bharry\/wp-json\/wp\/v2\/tags?post=1301"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}