Azure pipeline security

(0) Share

Report

Posted on by Juan Pedro Methol

230

Hi everyone,

A customer I am working for is setting up the Azure pipelines to automate the deployment of customizations for the project. They are following this documentation https://docs.microsoft.com/en-us/dynamics365/fin-ops-core/dev-itpro/dev-tools/pipeline-lcs-connection. They are a multinational corporation with an internatl IT security deparment that is challeging the fact that the app registration should have this two conditions:

Public client/native (mobile & desktop)
App collect plaintext passwords (enabling mobile and desktop flows)

Is there any other way to the connection between LCS and ADO avoiding the public exposure and wihthout collecting the passwords? like an Azure VNets on the same tenant, or something similar? Or any other alternative considering this is SaaS... If you had a similar requirement and you have found any documentation it will be welcomed :)

Thanks!!!

Juan

I have the same question (0)