Use the Azure Devops connector to manage software development pipelines.
Integrating your application with Azure Devops lets you use these operations in an automation. It exposes 20 actions and 1 trigger, listed below. Add the connector from the Connections area, authenticate, then select its operations in the automation builder. Capabilities: actions, triggers, knowledge (RAG).
Authentication
Before you begin, make sure you have the following information:
Connection Name: Choose a meaningful name for your connection. This name helps you identify the connection within your application or integration settings.
Authentication Type: Azure Devops supports the following authentication methods:
Personal Access Token (PAT)
OAuth
Service Principal / Managed Identity
Microsoft Entra ID
Authentication & setup
Azure DevOps REST APIs support multiple authentication methods, with Microsoft Entra ID being the recommended approach for production applications.
Personal Access Token (PAT)
Use this method for ad-hoc requests, personal scripts, and early prototyping.
Log in to the Azure DevOps portal.
Click the User Settings icon in the top-right corner.
Select Personal Access Tokens from the dropdown menu.
Click + New Token.
Provide a name for the token to identify its purpose.
Select the Organization where the token will be used.
Set an Expiration Period in line with your security policy.
Under Scopes, grant the required permissions — typically Code, Build, Release, and Work Items, depending on your integration needs.
Click Create.
Copy the generated token immediately — it is not displayed again.
In UnifyApps, paste it into the Personal Access Token field.
Microsoft Entra ID
Use this method for production integrations. It authenticates as an application registered in your Microsoft Entra ID (Azure AD) tenant.
In the Azure portal, go to Microsoft Entra ID > App registrations and select New registration.
Give the application a name and register it.
On the app's Overview page, copy the Application (client) ID and the Directory (tenant) ID.
Go to Certificates & secrets > New client secret, create a secret, and copy its Value immediately — it is not displayed again.
Go to API permissions > Add a permission, select Azure DevOps, and add the delegated permissions your integration requires. Grant admin consent if your tenant requires it.
Make sure the application has access to your Azure DevOps organization. In Azure DevOps, go to Organization settings > Users and add the service principal with an appropriate access level and project permissions.
In UnifyApps, enter:
Client ID: the Application (client) ID from step 3.
Client Secret: the secret value from step 4.
Tenant ID: the Directory (tenant) ID from step 3. You can also find this in the Azure portal under Azure Active Directory > Overview.
Scopes: defaults to
499b84ac-1321-427f-aa17-267ca6975798/.default, the Azure DevOps resource application ID. Leave the default unless you have a reason to change it.
Service Principal / Managed Identity
Use this method for machine-to-machine and automated scenarios where no user is present.
Register an application in Microsoft Entra ID, or identify an existing managed identity, as described in steps 1–4 above.
In Azure DevOps, go to Organization settings > Users, add the service principal or managed identity, and assign it an access level and the project permissions the integration needs.
In UnifyApps, enter the Client ID, Client Secret, and Tenant ID.
No scope selection is required for this method.
OAuth
Use this method to authorize the connection interactively, on behalf of a signed-in user.
Select the Scopes the integration requires. The default selection is
vso.work,vso.build,vso.code,vso.release,vso.test, andvso.analytics. Select only the scopes you need.Optionally enter your Tenant ID to restrict authorization to a specific Microsoft Entra tenant.
Complete the Microsoft sign-in and consent prompt when it appears.
Actions
Action Name | Description |
|---|---|
Add attachment to work item | Adds an existing attachment to an Azure DevOps work item using JSON Patch operations |
Create attachment | Uploads an attachment to Azure DevOps work items |
Create Epic | Creates an Epic work item in Azure DevOps |
Create Feature | Creates a Feature work item in Azure DevOps |
Create project | Queues a project to be created. |
Create Task | Creates a Task work item in Azure DevOps |
Create User Story | Creates a User Story work item in Azure DevOps |
Create work item | Creates a single work item in Azure DevOps using JSON Patch |
Delete work item | Deletes the specified work item and sends it to the recycle bin. |
Get comments | Gets the list of comments for a work item in Azure DevOps |
Get project | Get project with the specified id or name, optionally including capabilities. |
Get work item | Gets a single work item from Azure DevOps by work item ID |
List accounts | Returns a list of accounts for a specific owner or a specific member. |
List projects | Get all projects in the organization that the authenticated user has access to. |
List repositories | Lists repositories in Azure Devops |
List users | Lists users in Azure Devops |
List wikis | Lists wikis in Azure Devops |
List work items | Returns a list of work items by IDs from Azure DevOps (maximum 200) |
Query work items by WIQL | Executes a WIQL query to fetch work items from Azure DevOps |
Update work item | Updates a single work item in Azure DevOps using a JSON patch document |
Triggers
Trigger Name | Description |
|---|---|
On work item updated | Triggers when a work item is updated in an Azure DevOps project |