AAD and NuGet vs. MSA and NuGetIs it possible to change the location of packages for NuGet?Download old version of package with NuGetHow do I get NuGet to install/update all the packages in the packages.config?How to install an older version of package via NuGet?How do I install a NuGet package .nupkg file locally?This project references NuGet package(s) that are missing on this computerNuGet Packages are missingVSTS - unable to git push after connecting to Azure Active DirectoryNuGet Push Results in 401 Unauthorized Error within TFS Build and on TFS Server ItselfCan an external / guest / B2B collaboration user access Dynamics Operations OData?
Why does this rising edge detector using a capacitor and a resistor work?
Does a card have a keyword if it has the same effect as said keyword?
How does this change to the opportunity attack rule impact combat?
Where can I go to avoid planes overhead?
Would Hubble Space Telescope improve black hole image observed by EHT if it joined array of telesopes?
Are there any Final Fantasy Spirits in Super Smash Bros Ultimate?
A mathematically illogical argument in the derivation of Hamilton's equation in Goldstein
Why isn't nylon as strong as kevlar?
Short story with physics professor who "brings back the dead" (Asimov or Bradbury?)
I'm in your subnets, golfing your code
Independent, post-Brexit Scotland - would there be a hard border with England?
Can a nothic's Weird Insight action discover secrets about a player character that the character doesn't know about themselves?
Fill points into a pre-rotated convex Dodecahedron
Why is Arya visibly scared in the library in S8E3?
Is it possible to convert Map<Object, List<Object>> to Map<Id, List<SomeConcreteSObject>> without a loop?
How do I tell my manager that his code review comment is wrong?
In Avengers 1, why does Thanos need Loki?
What is the name of this hexagon/pentagon polyhedron?
What does this colon mean? It is not labeling, it is not ternary operator
Should I replace my bicycle tires if they have not been inflated in multiple years
What are the differences between credential stuffing and password spraying?
Upside-Down Pyramid Addition...REVERSED!
Should I mention being denied entry to UK due to a confusion in my Visa and Ticket bookings?
How might a mountain bowl form?
AAD and NuGet vs. MSA and NuGet
Is it possible to change the location of packages for NuGet?Download old version of package with NuGetHow do I get NuGet to install/update all the packages in the packages.config?How to install an older version of package via NuGet?How do I install a NuGet package .nupkg file locally?This project references NuGet package(s) that are missing on this computerNuGet Packages are missingVSTS - unable to git push after connecting to Azure Active DirectoryNuGet Push Results in 401 Unauthorized Error within TFS Build and on TFS Server ItselfCan an external / guest / B2B collaboration user access Dynamics Operations OData?
.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty height:90px;width:728px;box-sizing:border-box;
We're working in a shared repository where we're not the owner. Our AAD accounts have been invited - username@domain.com. We have no issues accessing the Git repo.
THE ISSUE: We can't access the NuGet repo. We can access it in ADO and see all the artifacts. However, when we try to pull the repo in VS, we get a 401 Unauthorized.
The workaround is to use a personal Microsoft Account (MSA). That's understandably not a good idea - it's customer work.
THE QUESTION: Is ADO's NuGet feature only supported by MSA and not AAD accounts when the invited AAD account isn't part of the owner organization? Is this a hard limit?
Thanks!
visual-studio nuget
azure-active-directory azure-artifacts microsoft-account asked Mar 22 at 21:53
Auri RahimzadehAuri Rahimzadeh
1,5371019
|
show 1 more comment
We're working in a shared repository where we're not the owner. Our AAD accounts have been invited - username@domain.com. We have no issues accessing the Git repo.
THE ISSUE: We can't access the NuGet repo. We can access it in ADO and see all the artifacts. However, when we try to pull the repo in VS, we get a 401 Unauthorized.
The workaround is to use a personal Microsoft Account (MSA). That's understandably not a good idea - it's customer work.
THE QUESTION: Is ADO's NuGet feature only supported by MSA and not AAD accounts when the invited AAD account isn't part of the owner organization? Is this a hard limit?
Thanks!
visual-studio nuget
azure-active-directory azure-artifacts microsoft-account asked Mar 22 at 21:53
Auri RahimzadehAuri Rahimzadeh
1,5371019
Are you logged into VS with your AAD account, or only your MSA? Azure DevOps certainly does support AAD, so it's either a permissions issue or an authentication issue. Have you followed Azure DevOps' documentation on using private NuGet feeds? Although I think it should work automatically from Visual Studio, there is a nuget authentication provider you can download and try as well.
– zivkan
Mar 23 at 6:40
Logged in with AAD. If I connect with an MSA, it works. If I connect with my AAD, it doesn't (401). Checked with multiple devs in our org, same issue. Add an MSA to the team, and boom, it works. Remove it, and it's broken again. Seems to work fine if the AAD tied to the NuGet repo is the same as those accounts invited to it. However, I feel the issue is with external AAD. Visual Studio doesn't support PATs when authenticating. Maybe a bug in ADO's auth?
– Auri Rahimzadeh
Mar 23 at 12:52
are you sure your aad accounts have read/download permissions on the feed? you can try manually creating a PAT on VSTS's website (sorry, to me ADO is the database API) and try restoring using nuget.exe with the PAT, or put the token in a nuget.config to restore with dotnet cli or VS. You can also download the nuget.exe with authentication plugin from the azure feeds "connect to feed" page, and try restoring using that.
– zivkan
Mar 23 at 13:35
@zivkan It wouldn't be ideal, although I'll try it... I didn't see a way to put the PAT in the nuget.config, but I'll look for some documentation around that. Still seems like there's a bug.
– Auri Rahimzadeh
Mar 24 at 21:54
Here are how to store an api key in nuget.config. I'm not suggesting this is a permanent solution, but it's about isolating exactly where the problem to find out if it's really a bug or not. if it is a bug, then you can report it with precise and detailed reproduction steps, and if it's not a bug, you can figure out what the configuration issue is/was. So far evidence is that your AAD doesn't have permissions to the private feed. these steps can prove me wrong.
– zivkan
Mar 24 at 22:18
|
show 1 more comment
We're working in a shared repository where we're not the owner. Our AAD accounts have been invited - username@domain.com. We have no issues accessing the Git repo.
THE ISSUE: We can't access the NuGet repo. We can access it in ADO and see all the artifacts. However, when we try to pull the repo in VS, we get a 401 Unauthorized.
The workaround is to use a personal Microsoft Account (MSA). That's understandably not a good idea - it's customer work.
THE QUESTION: Is ADO's NuGet feature only supported by MSA and not AAD accounts when the invited AAD account isn't part of the owner organization? Is this a hard limit?
Thanks!
visual-studio nuget
azure-active-directory azure-artifacts microsoft-account asked Mar 22 at 21:53
Auri RahimzadehAuri Rahimzadeh
1,5371019
We're working in a shared repository where we're not the owner. Our AAD accounts have been invited - username@domain.com. We have no issues accessing the Git repo.
THE ISSUE: We can't access the NuGet repo. We can access it in ADO and see all the artifacts. However, when we try to pull the repo in VS, we get a 401 Unauthorized.
The workaround is to use a personal Microsoft Account (MSA). That's understandably not a good idea - it's customer work.
THE QUESTION: Is ADO's NuGet feature only supported by MSA and not AAD accounts when the invited AAD account isn't part of the owner organization? Is this a hard limit?
Thanks!
visual-studio nuget
azure-active-directory azure-artifacts microsoft-account visual-studio nuget
azure-active-directory azure-artifacts microsoft-account asked Mar 22 at 21:53
Auri RahimzadehAuri Rahimzadeh
1,5371019
asked Mar 22 at 21:53
Auri RahimzadehAuri Rahimzadeh
1,5371019
asked Mar 22 at 21:53
Auri RahimzadehAuri Rahimzadeh
1,5371019
asked Mar 22 at 21:53
Auri RahimzadehAuri Rahimzadeh
1,5371019
asked Mar 22 at 21:53
Auri RahimzadehAuri Rahimzadeh
1,5371019
1,5371019
Are you logged into VS with your AAD account, or only your MSA? Azure DevOps certainly does support AAD, so it's either a permissions issue or an authentication issue. Have you followed Azure DevOps' documentation on using private NuGet feeds? Although I think it should work automatically from Visual Studio, there is a nuget authentication provider you can download and try as well.
– zivkan
Mar 23 at 6:40
Logged in with AAD. If I connect with an MSA, it works. If I connect with my AAD, it doesn't (401). Checked with multiple devs in our org, same issue. Add an MSA to the team, and boom, it works. Remove it, and it's broken again. Seems to work fine if the AAD tied to the NuGet repo is the same as those accounts invited to it. However, I feel the issue is with external AAD. Visual Studio doesn't support PATs when authenticating. Maybe a bug in ADO's auth?
– Auri Rahimzadeh
Mar 23 at 12:52
are you sure your aad accounts have read/download permissions on the feed? you can try manually creating a PAT on VSTS's website (sorry, to me ADO is the database API) and try restoring using nuget.exe with the PAT, or put the token in a nuget.config to restore with dotnet cli or VS. You can also download the nuget.exe with authentication plugin from the azure feeds "connect to feed" page, and try restoring using that.
– zivkan
Mar 23 at 13:35
@zivkan It wouldn't be ideal, although I'll try it... I didn't see a way to put the PAT in the nuget.config, but I'll look for some documentation around that. Still seems like there's a bug.
– Auri Rahimzadeh
Mar 24 at 21:54
Here are how to store an api key in nuget.config. I'm not suggesting this is a permanent solution, but it's about isolating exactly where the problem to find out if it's really a bug or not. if it is a bug, then you can report it with precise and detailed reproduction steps, and if it's not a bug, you can figure out what the configuration issue is/was. So far evidence is that your AAD doesn't have permissions to the private feed. these steps can prove me wrong.
– zivkan
Mar 24 at 22:18
|
show 1 more comment
Are you logged into VS with your AAD account, or only your MSA? Azure DevOps certainly does support AAD, so it's either a permissions issue or an authentication issue. Have you followed Azure DevOps' documentation on using private NuGet feeds? Although I think it should work automatically from Visual Studio, there is a nuget authentication provider you can download and try as well.
– zivkan
Mar 23 at 6:40
Logged in with AAD. If I connect with an MSA, it works. If I connect with my AAD, it doesn't (401). Checked with multiple devs in our org, same issue. Add an MSA to the team, and boom, it works. Remove it, and it's broken again. Seems to work fine if the AAD tied to the NuGet repo is the same as those accounts invited to it. However, I feel the issue is with external AAD. Visual Studio doesn't support PATs when authenticating. Maybe a bug in ADO's auth?
– Auri Rahimzadeh
Mar 23 at 12:52
are you sure your aad accounts have read/download permissions on the feed? you can try manually creating a PAT on VSTS's website (sorry, to me ADO is the database API) and try restoring using nuget.exe with the PAT, or put the token in a nuget.config to restore with dotnet cli or VS. You can also download the nuget.exe with authentication plugin from the azure feeds "connect to feed" page, and try restoring using that.
– zivkan
Mar 23 at 13:35
@zivkan It wouldn't be ideal, although I'll try it... I didn't see a way to put the PAT in the nuget.config, but I'll look for some documentation around that. Still seems like there's a bug.
– Auri Rahimzadeh
Mar 24 at 21:54
Here are how to store an api key in nuget.config. I'm not suggesting this is a permanent solution, but it's about isolating exactly where the problem to find out if it's really a bug or not. if it is a bug, then you can report it with precise and detailed reproduction steps, and if it's not a bug, you can figure out what the configuration issue is/was. So far evidence is that your AAD doesn't have permissions to the private feed. these steps can prove me wrong.
– zivkan
Mar 24 at 22:18
Are you logged into VS with your AAD account, or only your MSA? Azure DevOps certainly does support AAD, so it's either a permissions issue or an authentication issue. Have you followed Azure DevOps' documentation on using private NuGet feeds? Although I think it should work automatically from Visual Studio, there is a nuget authentication provider you can download and try as well.
– zivkan
Mar 23 at 6:40
Are you logged into VS with your AAD account, or only your MSA? Azure DevOps certainly does support AAD, so it's either a permissions issue or an authentication issue. Have you followed Azure DevOps' documentation on using private NuGet feeds? Although I think it should work automatically from Visual Studio, there is a nuget authentication provider you can download and try as well.
– zivkan
Mar 23 at 6:40
Logged in with AAD. If I connect with an MSA, it works. If I connect with my AAD, it doesn't (401). Checked with multiple devs in our org, same issue. Add an MSA to the team, and boom, it works. Remove it, and it's broken again. Seems to work fine if the AAD tied to the NuGet repo is the same as those accounts invited to it. However, I feel the issue is with external AAD. Visual Studio doesn't support PATs when authenticating. Maybe a bug in ADO's auth?
– Auri Rahimzadeh
Mar 23 at 12:52
Logged in with AAD. If I connect with an MSA, it works. If I connect with my AAD, it doesn't (401). Checked with multiple devs in our org, same issue. Add an MSA to the team, and boom, it works. Remove it, and it's broken again. Seems to work fine if the AAD tied to the NuGet repo is the same as those accounts invited to it. However, I feel the issue is with external AAD. Visual Studio doesn't support PATs when authenticating. Maybe a bug in ADO's auth?
– Auri Rahimzadeh
Mar 23 at 12:52
are you sure your aad accounts have read/download permissions on the feed? you can try manually creating a PAT on VSTS's website (sorry, to me ADO is the database API) and try restoring using nuget.exe with the PAT, or put the token in a nuget.config to restore with dotnet cli or VS. You can also download the nuget.exe with authentication plugin from the azure feeds "connect to feed" page, and try restoring using that.
– zivkan
Mar 23 at 13:35
are you sure your aad accounts have read/download permissions on the feed? you can try manually creating a PAT on VSTS's website (sorry, to me ADO is the database API) and try restoring using nuget.exe with the PAT, or put the token in a nuget.config to restore with dotnet cli or VS. You can also download the nuget.exe with authentication plugin from the azure feeds "connect to feed" page, and try restoring using that.
– zivkan
Mar 23 at 13:35
@zivkan It wouldn't be ideal, although I'll try it... I didn't see a way to put the PAT in the nuget.config, but I'll look for some documentation around that. Still seems like there's a bug.
– Auri Rahimzadeh
Mar 24 at 21:54
@zivkan It wouldn't be ideal, although I'll try it... I didn't see a way to put the PAT in the nuget.config, but I'll look for some documentation around that. Still seems like there's a bug.
– Auri Rahimzadeh
Mar 24 at 21:54
Here are how to store an api key in nuget.config. I'm not suggesting this is a permanent solution, but it's about isolating exactly where the problem to find out if it's really a bug or not. if it is a bug, then you can report it with precise and detailed reproduction steps, and if it's not a bug, you can figure out what the configuration issue is/was. So far evidence is that your AAD doesn't have permissions to the private feed. these steps can prove me wrong.
– zivkan
Mar 24 at 22:18
Here are how to store an api key in nuget.config. I'm not suggesting this is a permanent solution, but it's about isolating exactly where the problem to find out if it's really a bug or not. if it is a bug, then you can report it with precise and detailed reproduction steps, and if it's not a bug, you can figure out what the configuration issue is/was. So far evidence is that your AAD doesn't have permissions to the private feed. these steps can prove me wrong.
– zivkan
Mar 24 at 22:18
|
show 1 more comment
1 Answer
1
active
oldest
votes
Authentication with Azure Artifacts can be a bit of a pain... but it works (even with guest AAD accounts). I am using it like this every day. If you can download the file from the feed via the UI, you will also be able to download it via VisualStudio or other tools.
VisualStudio should have no issue at all when talking to the feed, at least if it is a somewhat current version. For VSCode and others you should try the Azure Artifacts Credential Provider and run something along these lines: dotnet restore --interactive
answered Mar 23 at 17:38
Alex AITAlex AIT
2,32621226
I can download the JSON feed from the URI ADO provides. However, when I'm in Visual Studio, it prompts for credentials, then fails with a 401. If I use a regular ol' MSA account, it works flawlessly. You're using a guest account every day?
– Auri Rahimzadeh
Mar 24 at 21:50
My AAD account is my main account in VisualStudio. My MSA account is only added as a secondary account. Yes, I am a guest in the tenant of another company.
– Alex AIT
Mar 25 at 15:31
Thanks, Alex. I'll review. If I find an answer, I'll post it here. Thanks, all, too!
– Auri Rahimzadeh
Mar 26 at 12:55
add a comment |
Your Answer
StackExchange.ifUsing("editor", function ()
StackExchange.using("externalEditor", function ()
StackExchange.using("snippets", function ()
StackExchange.snippets.init();
);
);
, "code-snippets");
StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "1"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);
else
createEditor();
);
function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader:
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
,
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);
);
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f55308270%2faad-and-nuget-vs-msa-and-nuget%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
Authentication with Azure Artifacts can be a bit of a pain... but it works (even with guest AAD accounts). I am using it like this every day. If you can download the file from the feed via the UI, you will also be able to download it via VisualStudio or other tools.
VisualStudio should have no issue at all when talking to the feed, at least if it is a somewhat current version. For VSCode and others you should try the Azure Artifacts Credential Provider and run something along these lines: dotnet restore --interactive
answered Mar 23 at 17:38
Alex AITAlex AIT
2,32621226
I can download the JSON feed from the URI ADO provides. However, when I'm in Visual Studio, it prompts for credentials, then fails with a 401. If I use a regular ol' MSA account, it works flawlessly. You're using a guest account every day?
– Auri Rahimzadeh
Mar 24 at 21:50
My AAD account is my main account in VisualStudio. My MSA account is only added as a secondary account. Yes, I am a guest in the tenant of another company.
– Alex AIT
Mar 25 at 15:31
Thanks, Alex. I'll review. If I find an answer, I'll post it here. Thanks, all, too!
– Auri Rahimzadeh
Mar 26 at 12:55
add a comment |
Authentication with Azure Artifacts can be a bit of a pain... but it works (even with guest AAD accounts). I am using it like this every day. If you can download the file from the feed via the UI, you will also be able to download it via VisualStudio or other tools.
VisualStudio should have no issue at all when talking to the feed, at least if it is a somewhat current version. For VSCode and others you should try the Azure Artifacts Credential Provider and run something along these lines: dotnet restore --interactive
answered Mar 23 at 17:38
Alex AITAlex AIT
2,32621226
I can download the JSON feed from the URI ADO provides. However, when I'm in Visual Studio, it prompts for credentials, then fails with a 401. If I use a regular ol' MSA account, it works flawlessly. You're using a guest account every day?
– Auri Rahimzadeh
Mar 24 at 21:50
My AAD account is my main account in VisualStudio. My MSA account is only added as a secondary account. Yes, I am a guest in the tenant of another company.
– Alex AIT
Mar 25 at 15:31
Thanks, Alex. I'll review. If I find an answer, I'll post it here. Thanks, all, too!
– Auri Rahimzadeh
Mar 26 at 12:55
add a comment |
Authentication with Azure Artifacts can be a bit of a pain... but it works (even with guest AAD accounts). I am using it like this every day. If you can download the file from the feed via the UI, you will also be able to download it via VisualStudio or other tools.
VisualStudio should have no issue at all when talking to the feed, at least if it is a somewhat current version. For VSCode and others you should try the Azure Artifacts Credential Provider and run something along these lines: dotnet restore --interactive
answered Mar 23 at 17:38
Alex AITAlex AIT
2,32621226
Authentication with Azure Artifacts can be a bit of a pain... but it works (even with guest AAD accounts). I am using it like this every day. If you can download the file from the feed via the UI, you will also be able to download it via VisualStudio or other tools.
VisualStudio should have no issue at all when talking to the feed, at least if it is a somewhat current version. For VSCode and others you should try the Azure Artifacts Credential Provider and run something along these lines: dotnet restore --interactive
answered Mar 23 at 17:38
Alex AITAlex AIT
2,32621226
answered Mar 23 at 17:38
Alex AITAlex AIT
2,32621226
answered Mar 23 at 17:38
Alex AITAlex AIT
2,32621226
answered Mar 23 at 17:38
Alex AITAlex AIT
2,32621226
2,32621226
I can download the JSON feed from the URI ADO provides. However, when I'm in Visual Studio, it prompts for credentials, then fails with a 401. If I use a regular ol' MSA account, it works flawlessly. You're using a guest account every day?
– Auri Rahimzadeh
Mar 24 at 21:50
My AAD account is my main account in VisualStudio. My MSA account is only added as a secondary account. Yes, I am a guest in the tenant of another company.
– Alex AIT
Mar 25 at 15:31
Thanks, Alex. I'll review. If I find an answer, I'll post it here. Thanks, all, too!
– Auri Rahimzadeh
Mar 26 at 12:55
add a comment |
I can download the JSON feed from the URI ADO provides. However, when I'm in Visual Studio, it prompts for credentials, then fails with a 401. If I use a regular ol' MSA account, it works flawlessly. You're using a guest account every day?
– Auri Rahimzadeh
Mar 24 at 21:50
My AAD account is my main account in VisualStudio. My MSA account is only added as a secondary account. Yes, I am a guest in the tenant of another company.
– Alex AIT
Mar 25 at 15:31
Thanks, Alex. I'll review. If I find an answer, I'll post it here. Thanks, all, too!
– Auri Rahimzadeh
Mar 26 at 12:55
I can download the JSON feed from the URI ADO provides. However, when I'm in Visual Studio, it prompts for credentials, then fails with a 401. If I use a regular ol' MSA account, it works flawlessly. You're using a guest account every day?
– Auri Rahimzadeh
Mar 24 at 21:50
I can download the JSON feed from the URI ADO provides. However, when I'm in Visual Studio, it prompts for credentials, then fails with a 401. If I use a regular ol' MSA account, it works flawlessly. You're using a guest account every day?
– Auri Rahimzadeh
Mar 24 at 21:50
My AAD account is my main account in VisualStudio. My MSA account is only added as a secondary account. Yes, I am a guest in the tenant of another company.
– Alex AIT
Mar 25 at 15:31
My AAD account is my main account in VisualStudio. My MSA account is only added as a secondary account. Yes, I am a guest in the tenant of another company.
– Alex AIT
Mar 25 at 15:31
Thanks, Alex. I'll review. If I find an answer, I'll post it here. Thanks, all, too!
– Auri Rahimzadeh
Mar 26 at 12:55
Thanks, Alex. I'll review. If I find an answer, I'll post it here. Thanks, all, too!
– Auri Rahimzadeh
Mar 26 at 12:55
add a comment |
Thanks for contributing an answer to Stack Overflow!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f55308270%2faad-and-nuget-vs-msa-and-nuget%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Are you logged into VS with your AAD account, or only your MSA? Azure DevOps certainly does support AAD, so it's either a permissions issue or an authentication issue. Have you followed Azure DevOps' documentation on using private NuGet feeds? Although I think it should work automatically from Visual Studio, there is a nuget authentication provider you can download and try as well.
– zivkan
Mar 23 at 6:40
Logged in with AAD. If I connect with an MSA, it works. If I connect with my AAD, it doesn't (401). Checked with multiple devs in our org, same issue. Add an MSA to the team, and boom, it works. Remove it, and it's broken again. Seems to work fine if the AAD tied to the NuGet repo is the same as those accounts invited to it. However, I feel the issue is with external AAD. Visual Studio doesn't support PATs when authenticating. Maybe a bug in ADO's auth?
– Auri Rahimzadeh
Mar 23 at 12:52
are you sure your aad accounts have read/download permissions on the feed? you can try manually creating a PAT on VSTS's website (sorry, to me ADO is the database API) and try restoring using nuget.exe with the PAT, or put the token in a nuget.config to restore with dotnet cli or VS. You can also download the nuget.exe with authentication plugin from the azure feeds "connect to feed" page, and try restoring using that.
– zivkan
Mar 23 at 13:35
@zivkan It wouldn't be ideal, although I'll try it... I didn't see a way to put the PAT in the nuget.config, but I'll look for some documentation around that. Still seems like there's a bug.
– Auri Rahimzadeh
Mar 24 at 21:54
Here are how to store an api key in nuget.config. I'm not suggesting this is a permanent solution, but it's about isolating exactly where the problem to find out if it's really a bug or not. if it is a bug, then you can report it with precise and detailed reproduction steps, and if it's not a bug, you can figure out what the configuration issue is/was. So far evidence is that your AAD doesn't have permissions to the private feed. these steps can prove me wrong.
– zivkan
Mar 24 at 22:18