Azure Dev Ops Integration: Key Safe Credentials Expiration

[dmonteleone]

 

We are experiencing an issue with our Azure DevOps integration where the Key Safe credentials expire periodically. Each time this happens, we have to manually go into the Key Safe, revoke access, and then re-enable access by signing back in.

Has anyone else encountered this issue? If so, how have you managed to resolve it? Are there any settings or configurations we might be missing that could prevent the credentials from expiring?

Any insights or suggestions would be greatly appreciated.

[Lee C]

Where can you see that the credentials have expired?

i have a similar issue with the Entra ID group management integration, that cloud automation is not executing in workflows and not producing any errors

[Jordan Gooding-McGovern]

Hi @dmonteleone Do you have any timeframes for the credentials expiring? (E.g. a day, a week, a month ,3-6months) 
That will help us investigate further on our end and see if/where things could be tripping up. 

I remember reading in the MS documentation a while ago that refresh tokens only last 90 days of inactivity, it was a security change I believe. 

[dmonteleone]

7 hours ago, Lee C said:

Where can you see that the credentials have expired?

i have a similar issue with the Entra ID group management integration, that cloud automation is not executing in workflows and not producing any errors

This is how I saw that the credentials had expired when I ran the workflow it returned a 302 status code which is related to Authentication and when I refresh the credentials this error disappears


 

 

4 hours ago, Jordan Gooding-McGovern said:

Hi @dmonteleone Do you have any timeframes for the credentials expiring? (E.g. a day, a week, a month ,3-6months) 
That will help us investigate further on our end and see if/where things could be tripping up. 

I remember reading in the MS documentation a while ago that refresh tokens only last 90 days of inactivity, it was a security change I believe. 

It looks like it is less than a week because the last time I refreshed the credentials were when I initially posted this and the error above is from this morning.

[dmonteleone]

On 12/11/2024 at 02:43, Jordan Gooding-McGovern said:

Hi @dmonteleone Do you have any timeframes for the credentials expiring? (E.g. a day, a week, a month ,3-6months) 
That will help us investigate further on our end and see if/where things could be tripping up. 

I remember reading in the MS documentation a while ago that refresh tokens only last 90 days of inactivity, it was a security change I believe. 

Hi @Jordan Gooding-McGovern I was wondering if you or anyone else has had any luck looking into this issue?

[Berto2002]

We have this issue and have a scheduled request that goes to our infra team every 80 days to refresh them. Will follow this to see what comes from it.