Retirement of Azure DevOps issuer in Workload identity federation service connections
Jun 22, 2026Eric van Wijk
Summary
Announces the deprecation of the Azure DevOps issuer (`https://vstoken.dev.azure.com`) in workload identity federation (WIF) service connections, with a retirement date of July 1, 2027. New service connections created since November 2025 already use the Microsoft Entra issuer (`https://login.microsoftonline.com/`). Existing service connections using the Azure DevOps issuer will show warnings starting July 2026 and will be retired on July 1, 2027. Provides instructions for converting existing service connections to use the Microsoft Entra issuer.
More from the Azure DevOps Service Connection with Microsoft Entra trail
- You can now use the Azure DevOps Service Connection instead of a PAT or Build Session token
- Optimizing Git policy management at scale
- Azure DevOps MCP Server April Update
- One-click security scanning and org-wide alert triage come to Advanced Security
- Retirement of Global Personal Access Tokens in Azure DevOps