Azure DevOps connector to external organization

[mveloso]

Hi

I am trying to setup a flow to connect to my customer's ADO and i cannot see the customer's organization name in my drop down list. I checked the documentation here: https://marketplace.visualstudio.com/items?itemName=MS-Flow.microsoftflow and the only thing that they mention is to make sure that the account supports oAuth. 

1. How do i check that the account supports oAuth? the only setting i see that may match this description is on the org level and it is already turned on " third party applications via oAuth"
2. What am i missing? i am trying to connect using my corp account which is Project admin, but this is not an account on the customer's domain

[rimatos]

Hi @mveloso,

In this situation I believe the issue is the fact that the account that you are using is not on the customers domain. 

When you create a connection, the conector will retrieve the information from the tenant of the account you used as a connection. As such, it should only display the organizations that you own, and not the organizations owned by your customer. If you have permissions to access the organization you could try to enter the organization manually as a custom value.

For mor information on this connector you can consult our documentation here.

Hope this helps!

Regards,

Ricardo

[mveloso]

@rimatos , thank you for your reply,

I am not sure the problem is the fact that i am using an account that is not on the Domain, unless that is a new restriction, because if have already done this on a previous customer, though i do not know how they had DevOps configured to allow that, which is what i am trying to find out.

I have tried entering the org details manually, but when i try to save the flow i get the following error :

Flow save failed with code 'DynamicOperationRequestClientFailure' and message 'The dynamic operation request to API 'visualstudioteamservices' operation 'GetResponseWorkItemSchema' failed with status code 'Unauthorized'. This may indicate invalid input parameters. Error response: { "status": 401, "message": "TF400813: The user '<SOME GUID>\\xxx@bbb.com' is not authorized to access this resource.\r\nAzure DevOps ActivityId: <SOME GUID>\r\nDetails: {\"$id\":\"1\",\"innerException\":null,\"message\":\"TF400813: The user '<SOME GUID>\\xxx@bbb.com' is not authorized to access this resource.\",\"typeName\":\"Microsoft.TeamFoundation.Framework.Server.UnauthorizedRequestException, Microsoft.TeamFoundation.Framework.Server, Version=14.0.0.0, Culture=neutral, PublicKeyToken=XXXXXX\",\"typeKey\":\"UnauthorizedRequestException\",\"errorCode\":0,\"eventId\":3000}\r\nclientRequestId: xxxxxxxxxx", "error": { "message": "TF400813: The user '<SOME GUID>\\xxx@bbb.com' is not authorized to access this resource.\r\nAzure DevOps ActivityId: XXXXXXXX\r\nDetails: {\"$id\":\"1\",\"innerException\":null,\"message\":\"TF400813: The user '<SOME GUID>\\xxx@bbb.com' is not authorized to access this resource.\",\"typeName\":\"Microsoft.TeamFoundation.Framework.Server.UnauthorizedRequestException, Microsoft.TeamFoundation.Framework.Server, Version=14.0.0.0, Culture=neutral, PublicKeyToken=XXXXXXX\",\"typeKey\":\"UnauthorizedRequestException\",\"errorCode\":0,\"eventId\":3000}" }, "source": "vsts-wcus.azconn-wcus-01.p.azurewebsites.net" }'.

So, clearly, i am missing some permission, though the link you have provided does not explain how to set the needed permissions

"To use this integration, you will need access to a Visual Studio Team Services account with API access enabled. To make a connection, select Sign In. You will be prompted to provide your Visual Studio Team Services account, follow the remainder of the screens to create a connection."

when i sign in with my account nothing changes.

Please also note that, with this same account, i am Project administrator on the project i am trying to connect the Flow to.

So maybe i am missing some other permission that i am not aware of? any additional information would be highly appreciated 🙂

Thanks

[rimatos · Accepted solution]

Hi @mveloso,

I'm not entirely sure how the process of authenticating and giving access to external users in Azure Dev Ops works, but i would assume to have something to do with the environment settings, and adding users to the required Project , with appropriate Access level, and to the desired Project and Group.

My suggestion would be to double check this are and see how your user is configured, as this could indicate the reason why you are receiving the unauthorized error message.

As for other places to look into that I can think of would be checking in the Azure Active Directory if the customer as any restrictions in Azure Dev Ops, or to external/guest users.

I hope this helps!
If you still find yourself having issues into connecting to this service my recommendation would be to open a ticket to Microsoft Support through https://admin.powerplatform.microsoft.com/support, in order to be able to Troubleshoot this in more depth.

Regards,

Ricardo

[mveloso]

Thanks, you have been very helpful

[Anonymous]

Hi @mveloso ,

I am facing the same issue. Organization is not showing in the dropdown. User has access level BASIC in the organization. How do you solved the problem? 
Thank you in advance!

[Koolc]

To anyone in the future running into this issue - I went to the DevOps Organization> Organization Settings > Security > Policies 

and enabled "Third-Party application access via OAuth" and it fixed my issue.

-C