Microsoft

Enabling administrators to revoke VSTS access tokens

Jul 24, 2018Justin Marks
Enabling administrators to revoke VSTS access tokens
SummaryAI, from the source post

Introduced new REST APIs for administrators to centrally revoke Personal Access Tokens (PAT) and JSON Web Tokens (JWT) created by users in their Visual Studio Team Services (VSTS) accounts. Provided a PowerShell script to automate calling these APIs by passing a list of user principal names (UPNs). Announced an automated revocation of potentially impacted tokens for affected customers on August 3, 2018, following email notification to VSTS account admins.

More from the Personal Access Token (PAT) Creation Restriction Policy trail