> ## Documentation Index
> Fetch the complete documentation index at: https://docs.envzero.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Action required: switch Azure DevOps connections to Microsoft Entra ID

> Azure DevOps connections authorize through Microsoft Entra ID, and existing connections can switch from Azure DevOps OAuth in Organization Settings.

<Warning>
  Existing Azure DevOps connections keep using Azure DevOps OAuth until you switch them. Microsoft scheduled Azure DevOps OAuth for removal in 2026, and connections that have not switched stop working when it is removed.
</Warning>

Microsoft is retiring Azure DevOps OAuth apps in 2026. env zero now connects to Azure DevOps through Microsoft Entra ID.

New Azure DevOps connections use Microsoft Entra ID by default.

Existing connections that use Azure DevOps OAuth show an exclamation mark in **Organization Settings > VCS**. Open the connection, select **Microsoft Entra ID (recommended)**, and sign in as the same Azure DevOps user. Templates, environments, and webhooks keep working after the switch.

If your tenant requires admin consent, a Microsoft Entra administrator grants it once for the tenant.

Learn more: [Microsoft Entra ID authentication](/guides/admin-guide/templates/azure-devops-integration#microsoft-entra-id-authentication)