Federated identity and Visual Studio Online - Restricting Access

Hi,
Using federated identity, can I restrict access to Visual Studio Online only from the corporate network, the same way I can with office 365? If so anyone know what claim rules should be used. Going further can I restrict by client certificate?
Thanks

Hi PMLIO,
So the answer to your question is a mixture of both yes and no, depending on the level of restriction you desire.
VSO has deep integration with Azure Active Directory, which allows you to restrict access to your Visual Studio Online account to only users who exist in your corporate directory.
This page details more about this support and how to enable it. If you remove users from your Azure AD directory (which can be synced with your on-prem directory), they will lose access to your Visual Studio Online account automatically, without you
having to manually remove them from the account. Will that fulfill your requirements?
We currently don't support a scenario where only users who are connecting to Visual Studio Online from a corporate network are permitted to access your account. If that's something you need, we recommend an on premise deployment of Team Foundation Server.
We'd certainly welcome a feature suggestion on the
Visual Studio Uservoice to add support for this in Visual Studio Online!
Client certificate authentication falls into the same bucket as above: Visual Studio Online doesn't support client certificate authentication. There's a
UserVoice suggestion about supporting SSH auth that's in a similar vein, so it's definitely something we're hearing desire for.
Let me know if you have any more questions!
Regards,
Will Barr
Software Engineer | VSCS Developer Identity

Similar Messages

Release management with Azure and Visual Studio Online (Cloud TFS)

What strategy would you use to manage the releasing of versioned software to Azure cloud services (web and worker roles)? We are not looking for continuous integration. We are using Visual Studio 2013 and Visual Studio Online (Cloud TFS).
At one point, we were releasing straight from Visual Studio using the Azure Cloud Project Publish tool. This is really bad practice in my opinion as you can never be sure what you are really releasing. Additionally, there is no automated control on the labeling
or branching of code, or the running of unit tests and code analysis checks.
Next, we employed Release builds on Visual Studio Online. Before deployment, one would edit the appropriate Build Definition (whether it be for Test or Production by and filling in the code label (under the "Get Version" build property) that is to
be released. This would then get the appropriate code (by the label specified), build it, and release it to whatever cloud service is specified in the targeted Cloud Project profile (this is using the AzureContinuousDeployment.11.xaml template).
There is still a degree of manual intervention involved. Also, the fact that a version of code is built every time before it is released is not ideal (as far as I understand it would be better if it was packaged once).
Microsoft Release Management tools
look ideal for the job, but are not supported with Visual Studio Online.
Is there a better way of handling our releases?

/waves hand.. These are not the tools you seek. You are looking for continuous integration.
Although CI has the word continuous in there, it does not mean "all the time, every checkin". It can easily refer only to those bits you want to release - -and the way to tell the system which bits you want released is to merge them to a Releases
branch.
If you do this, not only do you get all the joy of controlled CI, but you guarantee what you release is exactly what is controlled in your SCM - under the Releases branch, preferably tagged or otherwise noted as a particular release. That means you can also
rollback to a previous release by simply reverting to a previous release in your SCM!
Of course you don't have to let it happen automatically, you can set it up to build 'continually' and then remove the check on the SCM to see if any changes have been committed. You can replace this with the manual build button.

Project Server and Visual Studio Online

With the release of Visual Studio Online, will we be able link Project Server 2013 to it, as we can with our on-prem TFS server?
Thanks in advance,
Tim

Hello,
as Paul mentioned – out of the box there is no integration solution implemented as it was offered by MS for the on-prem versions of the two products.
Microsoft however offers a set of APIs for the online and on-prem versions of those tools which dependant on the use case can be used to achieve the integration (Project Server: CSOM, JSOM, odata; Visual Studio Online: odata).
You can custom code against those APIs or reuse standard products which are available on the market by partners which offer those scenarios between Visual Studio Online and Project Server on-prem and online (e.g. CS Connect by Campana & Schott -
http://www.campana-schott.com/en/technologies/cs-connect?qll=mf).
Please let me know if you need further information…
Bastian

Error message when trying to access Code in Visual Studio Online project.

I have been using visual studio online for a while. Last week I connected azure console to my visual studio online account so that I could add an additional person to one of my projects.
After that, I create a new Git based project. From the outset in the outset, I have been receiving a message in code explorer in the new project:
The items requested either do not exist on the server at the specified versions, or you do not have permission to access them.Hide details
TFS.WebApi.Exception: The items requested either do not exist on the server at the specified versions, or you do not have permission to access them. at b.a._getFailedRequestError (https://*******.visualstudio.com/_static/tfs/20150113T200222/_scripts/TFS/min/corejs?v=RGgj5lMwHLD78kGD2wBxR4uHtflIGwSdmCEhWbtUphc1:52:3204)
at https://*******.visualstudio.com/_static/tfs/20150113T200222/_scripts/TFS/min/corejs?v=RGgj5lMwHLD78kGD2wBxR4uHtflIGwSdmCEhWbtUphc1:52:2285 at b.a._handleRequestFailure (https://*******.visualstudio.com/_static/tfs/20150113T200222/_scripts/TFS/min/corejs?v=RGgj5lMwHLD78kGD2wBxR4uHtflIGwSdmCEhWbtUphc1:52:2931)
at Object.<anonymous> (https://*******.visualstudio.com/_static/tfs/20150113T200222/_scripts/TFS/min/corejs?v=RGgj5lMwHLD78kGD2wBxR4uHtflIGwSdmCEhWbtUphc1:52:2225) at l (https://ajax.aspnetcdn.com/ajax/jQuery/jquery-1.8.3.min.js:2:16996) at Object.c.fireWith
(https://ajax.aspnetcdn.com/ajax/jQuery/jquery-1.8.3.min.js:2:17783) at T (https://ajax.aspnetcdn.com/ajax/jQuery/jquery-1.8.3.min.js:2:81036) at XMLHttpRequest.r (https://ajax.aspnetcdn.com/ajax/jQuery/jquery-1.8.3.min.js:2:86563)
Accessing the project from Git tools connected fine and I was able to commit successfully, however, I don't know if the code is in the repo, because I cannot browse it on the website. Am still getting the message above.
I can explore code for any of my other project without issue. All but one of my projects is using git.
Any ideas?
Thanks

Hi Richie42,
I'd like to know whether you can push the commits to remote git repository, and when this issue occurred. When work with Git team project in Visual Studio Online, you have to clone the Git repository to local, and work with it.
You can also check if your have permissions to this team project in security page of team web access. Or
run
tfssecurity command in VS command line to have a check. Please execute tfssecurity /imx “MS account” /collection:url, for more information about tfssecurity /imx, please refer to:
http://msdn.microsoft.com/en-us/library/ms400806.aspx
Another option is clean team foundation cache, delete credentials in credential manager and delete browser cookies. Restart the Visual Studio to have a try. If the issue persists, please elaborate more details about your scenario with the reproduce steps.
Best regards,
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey.

Can I give our AD users access to Visual Studio Online?

Our AD is connected to our Azure Active Directory and synced via DirSync.
Is it possible for me to give our AD users access to VSO and they use their organizational login credentials OR do they need to create Microsoft accounts?
Our goal is single sign-on with our AD credentials. Please let me know if this is possible?
Thanks, Sam

Hi Sam,
You can link your Visual Studio Online account with your Azure Activy directoy. Directory administrators control who joins the directory and has possible access to your Visual Studio Online account. The users can use Azure Active directory accounts
to sign in Visual Stduio Online account. You can check this
page for more information about manage organization access for your account.
The numbers of users can access Visual Studio Online account depend on your license of Visual Studio Online account. You can add no more then 5 basic users and unlimited MSDN subscriptions if you have Basic license of Visual Studio Online account. Check
this
page for the pricing. However, you can assign team members stakeholder license if the users only view the project-level information. Check this
page for more information about stakeholder license of Visual Studio Online.
Best regards,
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey.

Visual Studio Online Build Failure - Unable to copy file, access to directory is denied

Hi,
I have an ASP.Net Web Site that compiles and builds with no errors on my local machine.
However when I attempt to build the site using default build definitions/configurations within Visual Studio Online and deploy to an Azure Website / App Service I receive the following errors:
C:\a\src\House of Canine\HouseOfCanine_1_.metaproj: Unable to copy file "C:\a\src\House of Canine\HouseOfCanine\Bin\AjaxControlToolkit.dll" to "HouseOfCanine\\Bin\AjaxControlToolkit.dll". Access to the path 'HouseOfCanine\\Bin\AjaxControlToolkit.dll' is denied.
Where, I assume, the directory "C:\a\src\House of Canine..." refers to the Visual Studio Online Directory and the directory "HouseOfCanine\\Bin\Ajax..." refers to the Azure Website directory.
This error is repeated for a number of other .dll files in the Bin folder and if I look at the diagnostics tab for the failed build on VSO, I can see that it is where it attempts to copy the binaries to the "drop" where the error fails.
Any advice much appreciated,
Ross
Update
MSBuild Error Code: MSB3021
It seems the permissions are not set correctly for the DLLs in the Bin folder however I cannot change the permissions of the files on Visual Studio Online. Any ideas?

Hi Ross,
Since this thread is more related to Visual Studio Online, I will move it to the right forum for a better response. Thanks for your understanding.
Best regards,
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place. <br/> Click <a
href="http://support.microsoft.com/common/survey.aspx?showpage=1&scid=sw%3Ben%3B3559&theme=tech"> HERE</a> to participate the survey.

Visual studio online - Excel power query usage and samples needed

Background
Visual Studio Online does not offer much in the way of reporting, when compared to (onsite) TFS... unless you utilize the REST API functionality.
The Visual Studio Online REST API is fairly extensive, but not very 'reporting' friendly to applications like Microsoft Excel.
Question
Are there any good examples of Microsoft Excel Power Query usage - to acquire and create reports via the Visual Studio Online REST API? I've searched - but surprisingly haven't found anything of substance. It is fairly simple to call a VSO REST
query using Excel Power Query, but not so simple to iterate through the lists within lists, etc... unless you are familiar with 'M language'.

Hi,
Thank you for reaching out to us. I am currently researching to gather more information with regards to your request. I shall revert back to you with an update at the earliest. Sincerely appreciate your patience.
Regards,
Nithin Rathnakar

Does Visual Studio Online support filtering Product Backlog/Sprint Views and Kanban by Area?

There seems to be guidance out there now that suggests using one Master Team Project (with Areas and Iterations for partitioning) for everything rather than a Team Project per Application/Solution as the 'out of the box' product sort of steers you towards.
If this guidance is valid, and I've heard that Microsoft use this approach internal, then is it possible to follow this guidance when using Visual Studio Online?
I ask because it appears that in order to follow the 'Master Team Project' approach you need to be able to filter various elements of the TFS UI by Area and Iteration in order to allow a discrete view of just the material relating to one 'logical' application,
team, etc.
Whilst I see how on-premise TFS can do some of this, I can't see any obvious way to do this with Visual Studio Online - and I'm new to that particular product so accept I may have missed something.
So my question is, can you follow the 'Master Team Project' approach if using Visual Studio Online and if so could someone steer me in the right direction please?
Thanks

Hi RedDwarf62,
Visual Studio Online(formerly Team Foundation Service) is a cloud-based service. When work with it, you can take it as TFS but no infrastructure to manage. You can follow the guide to work with Visual Studio Online.
To have mulpitle Applications/Solutions in one team project or use a team project for each application depends on you and the relationship between solutions/projects. If the solutons/applications has refences each other, it would be better to include
them in the same team project.
Working within a single Team Project also has its benefits. You can check this blog for more informaiton:
http://nakedalm.com/working-within-a-single-team-project-with-team-foundation-server-2012/
Best regards,
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey.

Visual Studio Online- Features and pricing.

I am TFS Admin in my organization and we(approx 100 users) have Visual Studio Professional
with MSDN subscription and i want to know about following things:
1. Is Visual Studio Online free for me(as we have MSDN Professional license)?
2. How much storage(on cloud) we can get with this subscription ,as we have thousands
of applications to store?
3. What are the features available for me with my current(Visual
Studio Professional with MSDN) subscription.
4. is there any other cost or pricing which i will have to pay in order to use Visual
Studio Online?
5. Authorization
migration from existing project : If we migrating from an On-Premises Team Foundation Server to Team Foundation Service:
1. IS source code history preserved
2. Are we able to migrate WorkItems with history.
6. SharePoint Integration with Team Foundation Service: Does
hosted team foundation service support integrate with SharePoint.

I have Visual Studio Professional with MSDN subscription and i want to know about following
things:
1. Is Visual Studio Online free for me?
2. How much storage we get with this subscription?
3. What are the features available for me with my current(Visual
Studio Professional with MSDN) subscription.
4. is there any other cost or pricing which i will have to pay in order to use Visual
Studio Online?

Problem with "View project-level information" permission when accessing build definition in Visual Studio Online

Hi,
from some time all our team members are experiancing problems when acsessing list of builds on Visual Studio Online or when trying to edit build definition in Visual Studio. Error message suggests problem with missing View project-level information permission:
"TF50309: The following account does not have sufficient permissions to complete the operation: XXXXXXXX. The following permissions are needed to perform this operation: View project-level information."
I've checked permissions of my User account and Group. "View project-level information" is set to Allow on both levels. We didn't make any changes in security configuration recently. Does anyone faced similar problem?
Short term solution was to add all users, to Project Collection Administrators Group, but it is not what we would like to live with.

It seems that the problem was fixed and Project Collection Administrators permissions are no longer required. Great :-)

Would I have tighter control with TFS as opposed to Visual Studio Online?

We have developers from all over the world and I want to make sure that our code which is our company's intellectual property is as secure as possible. We're currently using Visual Studio Online but a potentially disgruntled developer can log into VSO and
download our code into his/her local computer. I really want to prevent this scenario.
Would I have tighter control and security by implementing our own TFS server in a VM on Azure?
Thanks, Sam

Here's further clarification of my scenario:
First, we're entirely on Azure -- no on-premises network. We have a virtual network on Azure along with our ADs, VMs, etc. Our developers, both internal and external, use RemoteApp to write to their code so everything stays in the "cloud".
The problem with Visual Studio Online (VSO) is that a disgruntled developer could use his/her login credentials to log into VSO and download the code into their local machine.
Our objective is to keep everything that belongs to the company within our "virtual network" on Azure and NOWHERE ELSE.
Correct me if I'm wrong but I think a traditional TFS approach -- running on a VM within our virtual network -- may give me tighter security due to the fact that there's no public "end point" where a developer can connect. Therefore we should be
able to restrict code access to devices i.e. RemoteApp within our virtual network ONLY.
Is that a fair assumption or not?
P.S. I really don't want to manage yet another VM and we LOVE using services but I feel a service based approach such as VSO may not necessarily satisfy our security needs.
Thanks, Sam

Jenkins can not connect Visual Studio Online(not git repository)

I have seen some techinical document and tried some scenario.
1. Alternative Authentication on my profile
    Usename(primary) is my company email address.
    Username(secondary) is none.
2. set jenkins setup for TFS plug-in
     Tema Foundation Server is https://xxxxxxxx.visualstudio.com
     Project path is $Benchmark/BuildProcessTempletes
     Login name is my compalny email address
     Password is NO1 specified.
3. execute build at jenkins and some error outputed.
     TF30063: You are not authorized to access https://xxxxxxxx.visualstudio.com
     FATAL: Executable returned an unexpected result code 100
     ERROR: null
off courese i can login the VSO with VS or browser.
How can i authorize Visual Studio Online from Jenkins?

this link give me a solution.
Basically, tf.exe which is bundled at Visual studio can not use VSO. Use Team Explore Anywhere.

Can't connect to visual studio online source control from vs 2010 ice starting today 1-23-2015

apparently there has been a breaking change and I can no longer connect to my visual studio online account anymore through vs 2010 ice - i get this message when i try to connect to it in the ide
Microsoft Visual Studio
Error
Team Foundation Server https://xxxxx.visualstudio.com/defaultcollection does not exist or is not accessible at this time.
Technical information (for administrator):
TF30064: You are not authorized to access the server.
OK
I can log in manually with a web browser but I need to check in items from the ide - it worked this morning but stopped working this afternoon
when i try to debug the webpage that comes up in ide to connect it says line 4 char 16405 error object doesn't support this property or method - code
0 url https://apps.vssps.visualstudio.com/_status/tfs/20150123T002517/_scripts/TFS/Laoder.min.js do you want to continue running scripts on this page?

Hi diakoniaus,
For the situation, you can check if you have the need permissions to access the team project in Visual Studio Online.
To make sure the permission of your credential, we can run tfssecurity command in VS command line to have a check. Please execute
tfssecurity /imx “MS account” /collection:url, for more information about tfssecurity /imx, please refer to:
http://msdn.microsoft.com/en-us/library/ms400806.aspx
If you have the corresponding, you can also have a try on other machines to see if it works for you. Or you can clean team foundation cache, delete cookies in browser and delete the credentials that saved in credential manager. Then reconnect to the team
project via VS 2010. You can check the troubleshooting details in this
thread.
Best regards,
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey.

"Visual Studio Online does not support your browser. Please upgrade to a supported browser to ensure a fantastic experience" message with IE 11

Hi All,
I have recently migrated from TFS 2010 to TFS 2013. When developers are accessing TFS Web interface from IE 11 they are getting message "Visual Studio Online does not support your browser. Please upgrade to a supported browser to ensure
a fantastic experience!" and page is not showing up correctly. I can open Web interface from Chrome without any issues. Also I figured out if I open Developer Tools (F12) in IE Web Interface also works fine and screwed up again
when I close Developer Tools.
What can be wrong with IE11 settings?
Regards,
Oleg

Hi Oleg,
Thanks for your post.
You’re using TFS 2013 Update 4 now?
Please share your IE 11 screenshot within this error message here.
Have you use the TeamCompanion in your TFS Server? If yes, please refer to the solution in this article:
http://www.teamcompanion.com/blog/.
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey.

Remove test run from Load Test Manager in Visual Studio Online Load Testing

I have been using the Visual Studio Online Azure load testing for a while now, and I have a number of test runs that I would like to remove. I am not referring to my local Load Test Results Store (on-premise SQL DB), as I can remove test runs no problem.
I mean, how to remove them from "the cloud" so we can no longer re-download the test results.

Hi David,
As far as I know, it's not supported for Visual Studio Online to run load tests for solutions hosted on GitHub. You can submit a user voice
here.
Best regards,
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey.

Federated identity and Visual Studio Online - Restricting Access

Similar Messages

Maybe you are looking for