Azure DevOps OAuth Client Secrets Now Shown Only Once
Aug 13, 2025Angel Wong

Summary
Introduced a change to Azure DevOps OAuth where client secrets will be shown only once at the time of creation and will no longer be retrievable via the UI or API. This aligns with industry best practices and improves security by reducing the risk of accidental exposure and encouraging secure storage. The Get Registration Secret API will be deprecated and removed. New secret rotation APIs that support overlapping secrets will be available for users who lose access to a secret.
More from the Azure DevOps Service Connection with Microsoft Entra trail
- You can now use the Azure DevOps Service Connection instead of a PAT or Build Session token
- Retirement of Azure DevOps issuer in Workload identity federation service connections
- Optimizing Git policy management at scale
- Azure DevOps MCP Server April Update
- One-click security scanning and org-wide alert triage come to Advanced Security