Set up the Azure DevOps integration | Fluid Attacks Help

Set up the Azure DevOps integration

Follow these steps to set up Fluid Attacks' integration with Azure DevOps:
  1. Go to your Azure DevOps organization settings and ensure it allows third-party application access via OAuth.
  2. Turn on third-party app access on Azure DevOps to integrate with Fluid Attacks

    Also bear in mind that Azure allows you to configure certain issue templates with custom fields, some being mandatory. Since our integration is generic, you need to have the option Bypass rules on work item updates set to Allow for the integration to function correctly.
    Allow Bypass rules on work item updates on Azure to integrate with Fluid Attacks
    Note on duplicate issues
    Note: To avoid creating duplicate issues, the integration first checks if there is an existing issue with the same title as the type of vulnerability. If it finds a match, it will use it as the parent issue and create only the associated "Tasks" for each individual vulnerability of the type in question.

  3. On Fluid Attacks' platform, access the Integrations section from the collapsible sidebar.
    Access the Integrations section on the Fluid Attacks platform

  4. Click Use integration in the Azure DevOps card.
    Use the Azure DevOps integration with the Fluid Attacks platform

  5. Click the Connect button corresponding to the group for which you desire the integration.
    Choose the group to integrate with Azure on the Fluid Attacks platform

  6. Click on Authorize to connect your group to the Azure DevOps account.
    Authorize connection of your group on the Fluid Attacks platform to the Azure account

  7. Read the permissions you give Fluid Attacks with this integration and click the Accept button to agree to them.
    Give Fluid Attacks permission to integrate the platform with Azure

  8. Once redirected to the platform, enter your Azure DevOps organization and project names.
    Provide Azure organization and project names on the Fluid Attacks platform

  9. Click the Update button and you will be all set.
To show you where you are using this integration across your groups, the Azure DevOps card displays how many of the groups you have access to have the integration configured.

Configure Azure DevOps integration on the Fluid Attacks platform
Free trial message
Free trial
Search for vulnerabilities in your apps for free with Fluid Attacks' automated security testing! Start your 21-day free trial and discover the benefits of the Continuous Hacking Essential plan. If you prefer the Advanced plan, which includes the expertise of Fluid Attacks' hacking team, fill out this contact form.