Cannot add your account into VSTS–Visual Studio Team Services ?

This is a very common question that I have. Also this is quite easy for “us” using VSTS for the last 5 years, because VSTS is so spread out, that some people do no know how to add new users into VSTS.

(to see how to create a Microsoft Account, ex-LiveID, see after)

CONTEXT : Without voluntarily enter into details, let’s start by saying that

1. VSTS can use your AD (Active Directory) Account, provided you add an ADFS or use your AAD (Azure Active Directory)
2. VSTS can use your Office 365 Corporate Accounts (indeed, it is Azure Active Directory behind the scene)
3. VSTS can use a Microsoft Account (formally known as liveID, such as @outlook.com, @outlook.fr, @live.com, @live.fr, …)

The first 2 choices are THE recommended solution in terms of security (where you could also add multi-factor authentication to further improve security). Besides, when the user leaves the company, he automatically looses its access to ALL corporates accounts, including VSTS.

The third option is however used as a “hack” to provide quickly access to VSTS without having the pain to go thought the IT department connecting VSTS to the AAD.

Origin of numerous confusions : when mixing the two !!

If you have a Corporate Account say FName.LastName@Viseo.com, you were able to “convert” it into a Microsoft Account (not possible now for many reasons). But now, when you Log In, you have 2 choices !! (as per today, we have 2 portals : new one as default, and a button to switch to the former one. See next).

HOW TO CREATE A Microsoft Account (former LiveID) ?

Here’s an easy way (out of many) :

1. Go to any Microsoft portal using MS Account, for instance https://outlook.com or https://onedrive.com …
2. Since you don’t yet have a MS Account, you cannot Sign In, so just click “Sign up for free”
   
3. Then “Create a Microsoft Account
   
4. It’s where you have 2 solutions :
1. either invent an email address that respects the policies
   For instance, also in the past that was possible, you CANNOT choose your company one based on your AD ou Azure AD)
   
   
2. or click “Get a new email address” (recommended most of the time)
   
   
   

AS PER TODAY, we have 2 portals

Switching back to the previous portal using the link at the bottom right

APPENDICES and ADVANCED and LINKS !

Nowadays, Microsoft offers an easy way to Log in. However to try to understand what’s behind the scene, and for the sake of the illustration, let’s force it back to the former portal (so I can document this before it goes away for a simplified version). The former VSTS login portal accepts both MS Account and Corp Account :

When trying to Log in via Visual Studio 2017, we have this popup :
 
Then VS2017 detects the Login has 2 types : MS Account and Corporate Account. So he asks the question
(notice you can choose a newer interface)

Choose the one that corresponds to you, then enter the corresponding password (ideally, best not to us the same password for the 2 accounts. Because, in one gets hacked – most likely the MS Account as opposed to Corporate Account with MFA)

 
(notice the button on the Top to switch back to the new portal)

We have MANY CASES

When you use your Corporate Account that is NOT connected to VSTS (i.e. not connected to Azure AD), for example FName.LastName@Total.com, then, when we start entering the Login FName.LastName@Total.com, the portal will check 2 seconds what type of login it is. When we enter the password

Microsoft Account (ex Personal LiveID)	Corporate Account (eg. Azure AD, O365)
https://login.live.com/	https://login.microsoftonline.com/

LINKS from Microsoft

• Read about cleaning up the Azure AD and Microsoft account overlap
• Learn about connecting your VSTS account to an Azure AD tenant
• Learn about the impact to your VS subscriptions when you connect to AAD
• Learn how to bring guest users, either MSA sign-ins or members of external Azure AD tenants, into your Azure AD tenant
• Provide your users guidance on how to rename their personal accounts

[DevOps - Azure] Live Webcast–for international students

Great to have the opportunity to train during evening classes. I was live from Poland – Warsaw, with about 18 students on Azure DevOps. Many questions. Hope to see them loving Azure and VSTS soon !

Helping Student’s exchange France-Ukraine on ALM-VSTS-Azure

A Ukrainian university asked me to provide a talk on Best Practices on ALM with Azure.
Since I could not travel at that time, I gave a talk via Skype to 20 students during one hour (45 min + questions).

Because the Ukrainian students are also studying French, I had to give the talk entirely in French, which was easy as it is my native tong !

The slides are available here :

https://1drv.ms/b/s!AvT9OZrSFxhZxHD4vZ2LVqxP5fnf

Where is my Team Project created directly in Microsoft Azure ?

 

As per today, this service is in Preview. I had to fiddle around to find my way in. Here is how you could do it from within Microsoft Azure.

Let’s start the investigations, since this is not necessarily intuitive.

Create a “New Team Project (PREVIEW)”

From your Azure subscription, go to “New Team Project” . It is also going to create a VSTS portal.

Fill in the information,

NOW WHAT HAPPENDED ??? Because, we cannot see anything !

• If we try to delete the ressource group, we can see that Azure detects the dependencies to VSTS
• Looking at the old portal, we cannot see anything either,
  
• Looking at the list of “ALL RESSOURCES”, VSTS is still not there.

 

So where is it ?

1. Looking at the Logs of the creation of the ARM, Azure has created it … somewhere
   
2. Drilling down into the Ressource Group, use the Export Template button, ans you’ll find it :
   
3. Let’s use a feautre that I barely use. The “Browse”, and look at Team Services Accounts
   and you’ll find it, at LAST !!
   

It’s good, I can configure few things above.

So what’s the problem ??

The thing is that I cannot access (I least I don’t know) where is the configuration of the Azure Active Directory

As a result, in VSTS-Team Project, it is linked to a Default Directory, that I don’t want, and I cannot add any Team Members, from their Live ID. And from VSTS, it is a read only property:

I have this :

Instead of this, where I can fill in a Microsoft Account, instead of a Corporate account, of a Directory that is no use for me.