About
The Azure DevOps integration connects ControlMap to your client's Azure DevOps organization and collects the people who have access to it as user accounts. This gives you evidence of who can reach your client's source code and development tools, which supports access-control requirements in your compliance frameworks.
Azure DevOps is its own integration. It is separate from the Microsoft integration, and you add it from the same Add Integration list.
What it collects
For the Azure DevOps organization you choose, ControlMap collects:
- The people in the organization, as user accounts with their name and email. When an email matches someone in People, the account is linked to that person.
The compliance check for this integration is Collect evidence of security best practices from MS DevOps.
Before you start
Have this ready:
- Setting up integrations from the client portal is part of the Pro plan. For details, see the Free, Essentials and Pro plans article.
- An Azure DevOps sign-in that belongs to the organization you want to connect.
Connect Azure DevOps
- Go to Monitor › Integrations and select Add Integration.
- Search for Azure DevOps and select the Azure DevOps card. Its category is Source Code Version Control.
- On the Connection step, select Connect to Azure DevOps. The button is the only way forward: Next: Checks stays greyed out until you have signed in.
- ControlMap takes you to Azure DevOps, where you sign in and approve the connection. Azure DevOps then returns you to the setup page.
- Enter an Integration name. It is required.
- In Organization Name, select the Azure DevOps organization to connect. The list is loaded from the account you signed in with. ControlMap connects to this organization and syncs its members.
- Select Next: Checks.
- Complete the remaining steps as described in the Connect an integration article.
The setup page also shows a help panel on the right, with a link, Read this article on Support Portal, for more detail about the connector.
What you'll see after connecting
When setup is finished, the connection's page opens. The connection appears as a card in Monitor › Integrations, and its page shows the connection status and whether it is Running or Not Running. Compliance checks show No Data until the first scan has run, and the collected data starts to appear after that scan.
To scan straight away instead of waiting for the weekly schedule, select Run Once on the connection's page.
Disconnect or change settings
- To change the schedule, watchers or other settings, open the connection's card in Monitor › Integrations. The Connect an integration article describes each tab.
- Once a connection is made, the sign-in button on the Connection step reads Reconnect to Azure DevOps.
- To delete the integration, select the bin icon on its card and confirm. Deleting an integration also deletes all of its assets and their compliance status.
