How to activate "Alternate credentials" on Azure DevOps?

Question

I just created a new organization for my team on Azure DevOps. I wanted to activated the git access through username/password to begin with(for multiple reasons: We use Https, so no ssh certificate, and I've no idea how to use PAT with our current git client(sourcetree)).

Currently, when I go in my settings on "Alternate credentials", I get this:

But I've been into the organization page and I cannot find this settings? How can I enable it?

Answer 1

But I've been into the organization page and I cannot find this settings? How can I enable it?

You can't enable that, the Alternate authentication credentials setting has been removed from Organization settings=>Policies for newly created organizations. Check the blog shared above in Michael's answer.

I've no idea how to use PAT with our current git client.

It's recommended to use PAT instead since you have no SSH certificate. Here're samples about how to use git+pat without pop-up window for credentials (Useful when you're running the commands in pipeline, since you can't enter credentials if there's pop-up window):

1.You can generate Git credentials to get temp username and password, and then use format:

git clone https://UserName:Password@dev.azure.com/OrgName/ProjectName/_git/RepoName

2.You can create a limited PAT(more secure then Full access) and use command:

git clone https://anything:{yourPAT}@dev.azure.com/OrgName/ProjectName/_git/RepoName

Same format when using git push...

Also you can clone the repo with git clone + URL from this button. Per my experience, it will prompt for credentials and save the credentials in local machine.

For Source Tree:

Url: https://OrganizationName.visualstudio.com

userName: The email address of your azure devops account

password: PAT

Enter correct URL format, click the refresh PAT button and enter the email as username, PAT as password. The authentication succeeds in my source tree for windows.

Answer 2

Looks like effective March 2, 2020 Alternate Credentials are no longer supported. Organizations created before then can use them for a short time to transition to PATs. New organizations do not have that option. Source

From Microsoft DevBlog:

Deprecation Timeline

• Beginning December 9, 2019 we will disable and hide Alternate Credentials settings for organizations that don’t have Alternate Credentials set. This change will be in effect for all these organizations by December 20, 2019.
• In the coming months we will work with our customers that are still using the feature, to help them switch to another, more secure authentication method.
• March 2, 2020 – Start gradually disabling Alternate Credentials for all Azure DevOps organizations.

Legacy Organizations

If you have a legacy organization, the option would appear under Organization Settings, Policies (under the Security subheading). The toggle is called "Alternate authentication credentials"