Microsoft

Improved alternate authentication experience for Visual Studio Team Services (VSTS)

Jul 14, 2017Justin Marks
Improved alternate authentication experience for Visual Studio Team Services (VSTS)
SummaryAI, from the source post

This post details planned improvements to the end-user experience for generating and managing Personal Access Tokens (PATs) in Visual Studio Team Services (VSTS). Key enhancements include a more understandable PAT creation experience with guided steps, user-selectable expiration dates (with administrative policy enforcement), and scopes grouped by area with inline help. The list view for PATs will be improved to show scopes, accounts, last used date, and IP address, with filtering capabilities. Users will receive email notifications for expiring PATs. Administrators will gain APIs to audit user actions (IP, authentication type) and apply their own business logic, and new policies to manage maximum PAT lifetimes, including the option for never-expiring PATs. Administrators will also be able to revoke PATs for compromised users directly from the users hub. The post also mentions updating SSH and Basic credential experiences to match the new UX styles.

More from the Personal Access Token (PAT) Creation Restriction Policy trail