{"id":67669,"date":"2023-09-27T03:08:47","date_gmt":"2023-09-27T11:08:47","guid":{"rendered":"https:\/\/devblogs.microsoft.com\/devops\/?p=67669"},"modified":"2023-09-28T11:48:30","modified_gmt":"2023-09-28T19:48:30","slug":"managed-identity-and-service-principal-support-for-azure-devops-now-in-general-availability-ga","status":"publish","type":"post","link":"https:\/\/devblogs.microsoft.com\/devops\/managed-identity-and-service-principal-support-for-azure-devops-now-in-general-availability-ga\/","title":{"rendered":"Managed identity and service principal support for Azure DevOps now in General Availability (GA)"},"content":{"rendered":"<p>After announcing the <a href=\"https:\/\/devblogs.microsoft.com\/devops\/introducing-service-principal-and-managed-identity-support-on-azure-devops\/\" rel=\"noopener\" target=\"_blank\">release of Managed Identity and Service Principal support in public preview<\/a> last March, we were overcome by the positive response many of you had. We\u2019re grateful to those who have taken the time to implement a managed identity within your apps and tools. With your help, we\u2019ve collected valuable feature feedback and resolved some hidden bugs to improve the overall performance of this feature, bringing us to today, when we\u2019re happy to announce that the feature is now in General Availability (GA).<\/p>\n<p>Some notable GA user-facing updates worth calling out:<\/p>\n<p><em>1&#46; Set object-level permissions on service principals and managed identities across the site:<\/em><\/p>\n<p>We\u2019ve scoured the site to look for every dropdown where it makes sense to include service principals. They have now been added to many <a href=\"https:\/\/learn.microsoft.com\/en-us\/azure\/devops\/organizations\/security\/set-object-level-permissions?view=azure-devops\" rel=\"noopener\" target=\"_blank\">object-level permissions<\/a> dialogs across the platform, allowing you to set specific permissions for service principals in objects, such as Agent Pools, Feeds, Packages, Service Connections, and more.<\/p>\n<p><a href=\"https:\/\/devblogs.microsoft.com\/devops\/wp-content\/uploads\/sites\/6\/2023\/09\/Screenshot-2023-09-26-at-9.18.30-AM.png\"><img decoding=\"async\" src=\"https:\/\/devblogs.microsoft.com\/devops\/wp-content\/uploads\/sites\/6\/2023\/09\/Screenshot-2023-09-26-at-9.18.30-AM.png\" alt=\"Setting permissions on a service principal in the Feeds security dialog\" \/><\/a><\/p>\n<p><em>2&#46; Extended capabilities for service principals and managed identities in the Boards space:<\/em><\/p>\n<p>Service principals are now a little more powerful in Boards! Service principal support in Boards has been extended in the following places:<\/p>\n<ul>\n<li>Assign To field of a work item,<\/li>\n<li>Queries,<\/li>\n<li>Boards\u2019 configuration pages, including for swimlane and style rules,<\/li>\n<li>Boards\u2019 cards,<\/li>\n<li>Process rules and custom identities<\/li>\n<\/ul>\n<p><a href=\"https:\/\/devblogs.microsoft.com\/devops\/wp-content\/uploads\/sites\/6\/2023\/09\/Screenshot-2023-09-26-at-9.21.26-AM.png\"><img decoding=\"async\" src=\"https:\/\/devblogs.microsoft.com\/devops\/wp-content\/uploads\/sites\/6\/2023\/09\/Screenshot-2023-09-26-at-9.21.26-AM.png\" alt=\"Assigning a work item to a service principal\" \/><\/a><\/p>\n<p><a href=\"https:\/\/devblogs.microsoft.com\/devops\/wp-content\/uploads\/sites\/6\/2023\/09\/Screenshot-2023-09-26-at-9.23.02-AM.png\"><img decoding=\"async\" src=\"https:\/\/devblogs.microsoft.com\/devops\/wp-content\/uploads\/sites\/6\/2023\/09\/Screenshot-2023-09-26-at-9.23.02-AM.png\" alt=\"Querying for work items assigned to a service principal\" \/><\/a><\/p>\n<p><em>3&#46; Service principals and managed identities are blocked from using Azure DevOps OAuth:<\/em><\/p>\n<p>To reduce confusion on how service principals might be used, we have disabled any implementation of service principals in Azure DevOps OAuth flows, as they only pertain to the <a href=\"https:\/\/learn.microsoft.com\/en-us\/azure\/active-directory\/develop\/app-objects-and-service-principals?tabs=browser\" rel=\"noopener\" target=\"_blank\">Microsoft Identity platform<\/a>, and not Azure DevOps\u2019s OAuth platform.<\/p>\n<hr \/>\n<p>We continue to welcome any new feedback you have on how we can improve this feature. But we hope the bug fixes and feature improvements we\u2019ve made over these past few months will mean even more of you will explore implementing it more broadly within your organizations. <a href=\"https:\/\/learn.microsoft.com\/en-us\/azure\/devops\/integrate\/get-started\/authentication\/service-principal-managed-identity?view=azure-devops\" rel=\"noopener\" target=\"_blank\">Docs<\/a> have also been clarified to address questions that have come up since public preview.<\/p>\n<p>And as always, the comments section and the <a href=\"https:\/\/developercommunity.visualstudio.com\/AzureDevOps\" rel=\"noopener\" target=\"_blank\">Developer Community<\/a> remain open for you to share any thoughts and concerns you\u2019d like us to hear!<\/p>\n","protected":false},"excerpt":{"rendered":"<p>After announcing the release of Managed Identity and Service Principal support in public preview last March, we were overcome by the positive response many of you had. We\u2019re grateful to those who have taken the time to implement a managed identity within your apps and tools. With your help, we\u2019ve collected valuable feature feedback and [&hellip;]<\/p>\n","protected":false},"author":43580,"featured_media":60852,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[224,1,251],"tags":[],"class_list":["post-67669","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-azure","category-devops","category-security"],"acf":[],"blog_post_summary":"<p>After announcing the release of Managed Identity and Service Principal support in public preview last March, we were overcome by the positive response many of you had. We\u2019re grateful to those who have taken the time to implement a managed identity within your apps and tools. With your help, we\u2019ve collected valuable feature feedback and [&hellip;]<\/p>\n","_links":{"self":[{"href":"https:\/\/devblogs.microsoft.com\/devops\/wp-json\/wp\/v2\/posts\/67669","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/devblogs.microsoft.com\/devops\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/devblogs.microsoft.com\/devops\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/devops\/wp-json\/wp\/v2\/users\/43580"}],"replies":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/devops\/wp-json\/wp\/v2\/comments?post=67669"}],"version-history":[{"count":0,"href":"https:\/\/devblogs.microsoft.com\/devops\/wp-json\/wp\/v2\/posts\/67669\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/devops\/wp-json\/wp\/v2\/media\/60852"}],"wp:attachment":[{"href":"https:\/\/devblogs.microsoft.com\/devops\/wp-json\/wp\/v2\/media?parent=67669"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/devops\/wp-json\/wp\/v2\/categories?post=67669"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/devops\/wp-json\/wp\/v2\/tags?post=67669"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}