Azure-devops-docs: Credential Usage and Expiration

Created on 10 May 2018  Â·  4Comments  Â·  Source: MicrosoftDocs/azure-devops-docs

Hello,

I think it would be helpful to know what actually happens when you run NuGet CLI commands after the CredentialProvider.vss.exe is put in its proper place. If you are logged into Windows Active Directory that's linked to Azure Active Directory, then it seems to use that as your user for the commands. If you are logged in with a user without that, then a browser window appears asking you to log into a Microsoft account. It then stores those credentials somewhere. It would be nice to know where those credentials are stored since we first feared that they might be stored within the exe itself, which we thought would be too insecure for our purposes. It would be nice to know where they are in case we need to remove/reset them for any reason. Also, it would be nice to know if the username/password credentials stored expire at some point and how long that might be.

_EDIT 2018-05-10 10:58 AM_: It would also be nice to know if when you first run a command using AD credentials, then does it store those credentials as well? Never mind. It looks like it doesn't from our testing.

Thanks for your time,
Steve


Document Details

⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

devopsvc doc-bug help wanted

All 4 comments

In my case it asked for credentials once. I was able to push then but now I get access denied and I don't know where to go to fix the credentials.

Adding @alexmullans to knock out some of these questions, looks like it has gotten quite some momentum from the community. Alex, maybe we should think about adding an "Authentication" concepts doc or something?

Closing per Issue creators latest update.

Was this page helpful?
0 / 5 - 0 ratings