Use Git Credential Managers to authenticate to Azure Repos

Azure Repos | Azure DevOps Server 2019 | TFS 2018 | TFS 2017 | TFS 2015 | VS 2017 | VS 2015

Git Credential Managers simplify authentication with your Azure Repos Git repositories. Credential managers let you use the same credentials that you use for the Azure DevOps Services web portal. Credential managers support multi-factor authentication through Microsoft account or Azure Active Directory (Azure AD). Besides supporting multi-factor authentication with Azure Repos, credential managers also support two-factor authentication with GitHub repositories.

Azure Repos provides IDE support for Microsoft account and Azure AD authentication through the following clients:

If your environment doesn't have an integration available, configure your IDE with a Personal Access Token or SSH to connect to your repositories.

Install the Git Credential Manager

Windows

Download and run the latest Git for Windows installer, which includes the Git Credential Manager for Windows. Make sure to enable the Git Credential Manager installation option.

Select Enable Git Credential Manager during Git for Windows install

macOS and Linux

We recommend using SSH keys to authenticate to Azure Repos, not a credential manager.

Tip

Review the system and software requirements before installing the credential manager.

On macOS and Linux, there are several install options that use native package managers to install the credential manager. After installing the package for your platform, run the following command to configure Git to use the credential manager:

git credential-manager install

Alternatively, you can try the Git Credential Manager Core (Beta).

Using the Git Credential Manager

When you connect to a Git repository from your Git client for the first time, the credential manager prompts for credentials. Provide your Microsoft account or Azure AD credentials. If your account has multi-factor authentication enabled, the credential manager prompts you to go through that process as well.

Git Credential Manager prompting during Git pull

Once authenticated, the credential manager creates and caches a personal access token for future connections to the repo. Git commands that connect to this account won't prompt for user credentials until the token expires. A token can be revoked through Azure Repos.

Getting help

You can open and report issues with the Git Credential Manager for Windows on the project GitHub. Frequently Asked Questions for the Git Credential Manager for Windows are available in the online readme.

Manual installation steps for the Windows Git Credential Manager and the macOS and Linux Git Credential Manager are available. Use these steps to install the credential manager if the recommended steps above aren't suitable for your environment.

Learn more

We provide full source code for credential managers. We've also documented how the credential manager integrates with Git. Refer to the MSDN blog posts on the macOS and Linux Git Credential Manager and the Windows Credential Manager.

For information on the low-level internals of the Git Credential Manager for Windows, see How the Git Credential Manager works.