Create VSTS Service Principal
Working with one of our CSP customer’s and they needed to connect their Visual Studio Team Services account to their CSP Azure account. If you have a regular Pay-As-You-Go subscription, then you have access to the old portal (manage.windowsazure.com) but if you’re a CSP that doesn’t work. So after talking Brian Moore at Microsoft I created a series of steps that I thought I’d get down for the next time I need to do this.
You will need to logon to your Visual Studio Team Services account. As you can see I have logged into mine and I have a couple of projects.
You will need to select a project that you will deploy/integrate with Azure, I’ve selected my sample project.
This step is where you configure the project to connect to VSTS by creating an endpoint.
I’ve given my endpoint an incredibly creative name and associated it with a specific subscription.
Here the endpoint is complete and you have the option to change it’s configuration, manage the endpoint’s role within Azure as well as manage the service principal itself, and finally to disconnect the service principal. The disconnect will in fact delete the service principal from azure, so in production this service principal should only ever be used with Visual Studio.
As a side note, the manage service principal link kicks you over to the old portal, so for CSP customer’s this may in fact fail. See images below.
You have a couple of options here, change the connection name, and change the subscription.
This will take you to the Azure portal and let you adjust and generally fiddle with the roles associated with this Service Principal.
By default this appears to connect you over to the old portal. But this gives you the ability to manipulate the properties of the Service Principal.
Here is where you can find the same information in the new portal. This is difficult to see, but Azure Active Directory > App Registrations and then choose the Service Principal named VisualStudioSPN.
Finally, to remove the Endpoint and Service Principal, simply choose disconnect, and this will go through and clean everything up.