{"id":56224,"date":"2018-05-15T00:00:00","date_gmt":"2018-05-15T07:00:00","guid":{"rendered":"http:\/\/devblogs.microsoft.com\/nuget\/nuget-org-will-only-support-msa-aad-starting-june"},"modified":"2018-05-15T00:00:00","modified_gmt":"2018-05-15T07:00:00","slug":"nuget-org-will-only-support-msa-aad-starting-june","status":"publish","type":"post","link":"https:\/\/devblogs.microsoft.com\/dotnet\/nuget-org-will-only-support-msa-aad-starting-june\/","title":{"rendered":"NuGet.org will only support MSA\/AAD starting June 1st, 2018"},"content":{"rendered":"<p>We had previously announced the <a href=\"https:\/\/blog.nuget.org\/20180227\/Deprecating-NuGet-org-authentication.html\">deprecation of NuGet.org&#8217;s home-grown authentication<\/a> in favor of Microsoft accounts (MSA) that will allow us to add support for additional security systems such as two-factor authentication (2FA). We will be <strong>disabling the NuGet.org&#8217;s home-grown authentication mechanism starting June 1st, 2018<\/strong>. This means that you can only sign in to NuGet.org using a Microsoft account or an Azure AD account from next month. If you have not yet linked your account to MSA\/AAD, do it now!<\/p>\n<h2>Linking MSA\/AAD to an existing account<\/h2>\n<p>If you have not yet linked your NuGet.org account to a MSA\/AAD, you can do so from the <a href=\"https:\/\/www.nuget.org\/account\"><code>Account Settings<\/code><\/a> page &gt; <code>Login Account<\/code> &gt; <code>Link Microsoft account<\/code>:<\/p>\n<p><img decoding=\"async\" src=\"https:\/\/devblogs.microsoft.com\/dotnet\/wp-content\/uploads\/sites\/49\/2019\/05\/add-msa.png\" alt=\"Add MSA\" \/><\/p>\n<p><strong>Starting June 1st, 2018<\/strong> when you sign in to NuGet.org with a username\/password (NuGet.org authentication), you will be asked to link your MSA account in a blocking dialog as shown below. You won&#8217;t be able to proceed with any other action on NuGet.org including package upload, changing settings, etc. unless you link MSA\/AAD account with NuGet.org.<\/p>\n<p><img decoding=\"async\" src=\"https:\/\/devblogs.microsoft.com\/dotnet\/wp-content\/uploads\/sites\/49\/2019\/05\/link-msa-dialog.png\" alt=\"Blocking MSA dialog\" \/><\/p>\n<p>Once you sign in with your MSA\/AAD credentials, your account will be linked to the new authentication and the existing username\/password based NuGet.org authentication mechanism will be removed from your account. Going forward you must use the newly linked MSA\/AAD account to sign in to NuGet.org.<\/p>\n<p><strong>To convert your account into an <a href=\"https:\/\/docs.microsoft.com\/en-us\/nuget\/reference\/organizations-on-nuget-org\">organization<\/a><\/strong>, you can directly navigate to <a href=\"https:\/\/www.nuget.org\/account\/transform\">https:\/\/www.nuget.org\/account\/transform<\/a>. This will prevent you an additional step to first link an MSA before transforming your account to an organization.<\/p>\n<h2>Using two-factor authentication<\/h2>\n<p>We recommend you enable two-factor authentication (2FA), with your MSA account, to sign in NuGet.org for enhanced security. This can be easily enabled from the <a href=\"https:\/\/www.nuget.org\/account\"><code>Account Settings<\/code><\/a> page &gt; <code>Login Account<\/code> &gt; <code>Enable<\/code> 2FA:<\/p>\n<p><img decoding=\"async\" src=\"https:\/\/devblogs.microsoft.com\/dotnet\/wp-content\/uploads\/sites\/49\/2019\/05\/2fa-setting.png\" alt=\"2FA setting\" \/><\/p>\n<p><strong>Note<\/strong>:<\/p>\n<ul>\n<li>This setting will <strong>only enable 2FA while signing in to NuGet.org<\/strong> and not for all the other services you sign in with MSA. You may also choose to globally enable 2FA for MSA at <a href=\"https:\/\/account.live.com\/proofs\/Manage\">https:\/\/account.live.com\/proofs\/Manage<\/a>.<\/li>\n<li>2FA setting is not available in NuGet.org for Azure AD accounts as this setting is managed by the tenant admin of your Azure AD account. <\/li>\n<\/ul>\n<h2>We want to hear your feedback!<\/h2>\n<p>If you have any question, comment or feedback you can reach out to me at <a href=\"mailto:&#x61;&#110;&#x61;n&#103;&#x61;&#117;&#114;&#x40;&#109;&#x69;c&#114;&#x6f;&#115;&#111;&#x66;&#116;&#x2e;&#x63;&#111;&#x6d;\">&#x61;&#110;&#x61;n&#103;&#x61;&#117;&#114;&#x40;&#109;&#x69;c&#114;&#x6f;&#115;&#111;&#x66;&#116;&#x2e;&#x63;&#111;&#x6d;<\/a> or by tagging <a href=\"https:\/\/twitter.com\/nuget\">@nuget<\/a> in your tweets. You can also create an issue on our <a href=\"https:\/\/github.com\/NuGet\/NuGetGallery\/issues\/new\">Github repository<\/a>. We will be sure to announce any changes or updates regarding the key dates on our <a href=\"https:\/\/github.com\/NuGet\/Announcements\">NuGet\/Announcements<\/a> repo.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>We had previously announced the deprecation of NuGet.org&#8217;s home-grown authentication in favor of Microsoft accounts (MSA) that will allow us to add support for additional security systems such as two-factor authentication (2FA). We will be disabling the NuGet.org&#8217;s home-grown authentication mechanism starting June 1st, 2018. This means that you can only sign in to NuGet.org [&hellip;]<\/p>\n","protected":false},"author":139,"featured_media":56239,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[7874,7931,326],"tags":[],"class_list":["post-56224","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-nuget","category-nuget-org","category-security"],"acf":[],"blog_post_summary":"<p>We had previously announced the deprecation of NuGet.org&#8217;s home-grown authentication in favor of Microsoft accounts (MSA) that will allow us to add support for additional security systems such as two-factor authentication (2FA). We will be disabling the NuGet.org&#8217;s home-grown authentication mechanism starting June 1st, 2018. This means that you can only sign in to NuGet.org [&hellip;]<\/p>\n","_links":{"self":[{"href":"https:\/\/devblogs.microsoft.com\/dotnet\/wp-json\/wp\/v2\/posts\/56224","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/devblogs.microsoft.com\/dotnet\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/devblogs.microsoft.com\/dotnet\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/dotnet\/wp-json\/wp\/v2\/users\/139"}],"replies":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/dotnet\/wp-json\/wp\/v2\/comments?post=56224"}],"version-history":[{"count":0,"href":"https:\/\/devblogs.microsoft.com\/dotnet\/wp-json\/wp\/v2\/posts\/56224\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/dotnet\/wp-json\/wp\/v2\/media\/56239"}],"wp:attachment":[{"href":"https:\/\/devblogs.microsoft.com\/dotnet\/wp-json\/wp\/v2\/media?parent=56224"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/dotnet\/wp-json\/wp\/v2\/categories?post=56224"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/dotnet\/wp-json\/wp\/v2\/tags?post=56224"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}