Azure DevOps Integration
The Azure DevOps integration allows Devici to create Azure DevOps work items as the output of workflow tasks.
This enables teams to track threat modeling work directly in Azure DevOps alongside development and operational activities.
What the Azure DevOps Integration Does
When enabled, the Azure DevOps integration allows:
- Workflow tasks to create Azure DevOps work items
- Threat modeling actions to appear in Azure DevOps projects
- Teams to manage security-related work in existing Azure DevOps workflows
Azure DevOps work items are created when a workflow is configured with Azure DevOps as its output destination.
Connecting Azure DevOps to Devici
To create Azure DevOps work items from workflow tasks, you must first connect Azure DevOps to Devici.
Prerequisites
Before connecting Azure DevOps, ensure you have:
- Administrative access in Devici
- Access to the Azure DevOps organization you want to integrate
- A Personal Access Token (PAT) created in Azure DevOps with the required permissions
Create an Azure DevOps Personal Access Token (PAT)
In Azure DevOps, create a Personal Access Token with the following permissions:
- Work Items — Read & Write
- Graph — Read
Note
Personal Access Tokens expire. Ensure the token is rotated before expiration to prevent workflow failures.
Set Up the Azure DevOps Integration
To connect Azure DevOps to Devici:
- In Azure DevOps, identify the organization you want to integrate.
- Create a Personal Access Token with the required permissions.
- Open Settings in Devici.
- Navigate to App Integrations.
- Select Connect next to Azure DevOps.
-
Complete the integration form:
-
Azure DevOps organization
-
Azure DevOps Personal Access Token
-
Select Save.
Once saved, the Azure DevOps integration becomes available as an output option when creating workflows.
Using Azure DevOps with Workflows
After the integration is configured:
- Azure DevOps can be selected as the output destination when creating a workflow
- Each workflow task creates a corresponding Azure DevOps work item
- Work item lifecycle is managed in Azure DevOps
For information on configuring workflows, see: