PAT final

chcomley · chcomley · commit e9a9c58fb5fb · 2026-03-23T12:57:42.000-07:00
diff --git a/docs/artifacts/nuget/nuget-exe.md b/docs/artifacts/nuget/nuget-exe.md
@@ -4,6 +4,7 @@ description: Learn how to connect to Azure Artifacts feeds with NuGet CLI.
 ms.assetid: 10665DBC-846E-4192-8CAB-D5A4C6E40C65
 ms.service: azure-devops-artifacts
 ms.topic: how-to
+ms.custom: pat-reduction
 ms.date: 04/08/2025
 monikerRange: "<=azure-devops"
 "recommendations": "true"
diff --git a/docs/artifacts/quickstarts/github-actions.md b/docs/artifacts/quickstarts/github-actions.md
@@ -2,7 +2,7 @@
 title: Use GitHub Actions to push to Azure Artifacts
 description: Push a NuGet package to Azure Artifacts with a GitHub Actions workflow
 ms.author: jukullam
-ms.custom: github-actions-azure
+ms.custom: github-actions-azure, pat-reduction
 ms.date: 01/14/2026
 monikerRange: azure-devops
 author: juliakm
diff --git a/docs/artifacts/universal-packages/project-setup-universal-packages.md b/docs/artifacts/universal-packages/project-setup-universal-packages.md
@@ -3,6 +3,7 @@ title: Connect to an Azure Artifacts feed - Universal Packages
 description: Lean how to set up your project and connect to an Azure Artifacts feed to manage your Universal Packages.
 ms.service: azure-devops-artifacts
 ms.topic: how-to
+ms.custom: pat-reduction
 ms.date: 01/22/2025
 monikerRange: 'azure-devops'
 ---
diff --git a/docs/cli/azure-devops-cli-in-yaml.md b/docs/cli/azure-devops-cli-in-yaml.md
@@ -4,7 +4,7 @@ titleSuffix: Azure DevOps
 description: Learn how to use Azure DevOps CLI with a YAML pipeline with these examples that show how to run Azure DevOps CLI commands.
 ms.topic: how-to
 ms.subservice: azure-devops-reference
-ms.custom: devx-track-azurecli, linux-related-content
+ms.custom: devx-track-azurecli, linux-related-content, pat-reduction
 ms.manager: mijacobs 
 ms.author: chcomley  
 author: chcomley
diff --git a/docs/cli/entra-tokens.md b/docs/cli/entra-tokens.md
@@ -4,6 +4,7 @@ title: Issue Entra tokens with Azure CLI
 description: Use Microsoft Entra authentication on top of Azure CLI
 ms.assetid: 19285121-1805-4421-B7C4-63784C9A7CFA
 ms.subservice: azure-devops-security
+ms.custom: pat-reduction
 monikerRange: 'azure-devops'
 ms.author: chcomley
 author: chcomley
diff --git a/docs/extend/develop/auth-schemes.md b/docs/extend/develop/auth-schemes.md
@@ -3,6 +3,7 @@ title: Authentication Schemas for Service Endpoints | Extensions for Azure DevOp
 description: Find the different ways to authenticate with external services using service endpoints in Azure DevOps extensions.
 ms.assetid: bffc76b7-f6ba-41f0-8460-ccb44d45d670
 ms.subservice: azure-devops-ecosystem
+ms.custom: pat-reduction
 ms.topic: overview
 monikerRange: '<= azure-devops'
 ms.author: chcomley
diff --git a/docs/integrate/concepts/dotnet-client-libraries.md b/docs/integrate/concepts/dotnet-client-libraries.md
@@ -4,7 +4,7 @@ description: Learn how to use Azure DevOps .NET client libraries to integrate wo
 ms.assetid: 474cdb4f-9a5e-49fb-84b2-9c540ebcf98b
 ai-usage: ai-assisted
 ms.subservice: azure-devops-ecosystem
-ms.custom: devx-track-dotnet
+ms.custom: devx-track-dotnet, pat-reduction
 ms.topic: overview
 monikerRange: '<= azure-devops'
 ms.author: chcomley
diff --git a/docs/integrate/concepts/migration-guide.md b/docs/integrate/concepts/migration-guide.md
@@ -4,6 +4,7 @@ titleSuffix: Azure DevOps Services
 description: Step-by-step migration guide for upgrading from legacy WIT Client OM to modern REST-based .NET client libraries with secure authentication.
 ms.subservice: azure-devops-ecosystem
 ai-usage: ai-assisted
+ms.custom: pat-reduction
 ms.topic: overview
 ms.assetid: 30272A34-2CE1-41B3-BA7A-815D69309CBE
 ms.author: chcomley
diff --git a/docs/integrate/get-started/authentication/azure-devops-oauth.md b/docs/integrate/get-started/authentication/azure-devops-oauth.md
@@ -8,7 +8,7 @@ monikerRange: 'azure-devops'
 ms.author: chcomley
 author: chcomley
 ms.date: 07/14/2025
-ms.custom: sfi-image-nochange
+ms.custom: sfi-image-nochange, pat-reduction
 ---
 
 # Use Azure DevOps OAuth 2.0
diff --git a/docs/integrate/get-started/authentication/entra-oauth.md b/docs/integrate/get-started/authentication/entra-oauth.md
@@ -3,6 +3,7 @@ title: Building Azure DevOps integrations with Microsoft Entra OAuth apps
 description: Use Microsoft Entra authentication to integrate with Azure DevOps Services.
 ms.assetid: 19285121-1805-4421-B7C4-63784C9A7CFA
 ms.subservice: azure-devops-security
+ms.custom: pat-reduction
 ms.topic: overview
 monikerRange: 'azure-devops'
 ms.author: chcomley
diff --git a/docs/integrate/get-started/authentication/entra.md b/docs/integrate/get-started/authentication/entra.md
@@ -16,10 +16,6 @@ ms.date: 02/24/2026
 
 [!INCLUDE [version-eq-azure-devops](../../../includes/version-eq-azure-devops.md)]
 
-> [!IMPORTANT]
-> Use Microsoft Entra ID authentication for new applications that integrate with Azure DevOps Services.
-> It provides enhanced security, enterprise identity integration, and modern authentication capabilities.
-
 [!INCLUDE [use-microsoft-entra-reduce-pats](../../../includes/use-microsoft-entra-reduce-pats.md)]
 
 This article explains the benefits of Microsoft Entra ID authentication and guides you through implementing it in your applications.
diff --git a/docs/integrate/get-started/authentication/oauth.md b/docs/integrate/get-started/authentication/oauth.md
@@ -4,6 +4,7 @@ title: OAuth 2.0 Authentication for Azure DevOps REST APIs
 description: Learn how to use OAuth 2.0 authentication with Azure DevOps REST APIs, with Microsoft Entra ID as the recommended approach.
 ms.assetid: 19285121-1805-4421-B7C4-63784C9A7CFA
 ai-usage: ai-assisted
+ms.custom: pat-reduction
 ms.subservice: azure-devops-security
 monikerRange: 'azure-devops'
 ms.author: chcomley
diff --git a/docs/integrate/index.md b/docs/integrate/index.md
@@ -5,6 +5,7 @@ title: Build secure applications and services with Azure DevOps
 description: Learn how to build secure, scalable applications that integrate with Azure DevOps using modern authentication and best practices.
 ms.assetid: c9b97ad7-ffd8-4657-8322-74f764eec5c9
 ai-usage: ai-assisted
+ms.custom: pat-reduction
 monikerRange: '<= azure-devops'
 ms.author: chcomley
 author: chcomley
diff --git a/docs/managed-devops-pools/prerequisites.md b/docs/managed-devops-pools/prerequisites.md
@@ -2,7 +2,7 @@
 title: Prerequisites for Managed DevOps Pools
 description: Learn how to configure your Azure subscription and Azure DevOps organization for use with Managed DevOps Pools.
 ms.date: 10/07/2025
-ms.custom: sfi-image-nochange
+ms.custom: sfi-image-nochange, pat-reduction
 ms.topic: concept-article
 ---
 
diff --git a/docs/organizations/accounts/organization-management.md b/docs/organizations/accounts/organization-management.md
@@ -5,6 +5,7 @@ description: Manage an organization, so you can collaborate with others to devel
 ms.subservice: azure-devops-organizations
 ms.assetid: fa1dbe39-08b1-4eba-886a-33c1aa1e6a83
 ms.topic: overview
+ms.custom: pat-reduction
 ms.author: chcomley
 author: chcomley
 ms.date: 02/17/2026
diff --git a/docs/pipelines/agents/service-principal-agent-registration.md b/docs/pipelines/agents/service-principal-agent-registration.md
@@ -4,7 +4,7 @@ description: Learn how to register a self-hosted agent using a Service Principal
 ms.topic: concept-article
 ms.date: 04/26/2024
 monikerRange: 'azure-devops'
-ms.custom: arm2024, sfi-image-nochange
+ms.custom: arm2024, sfi-image-nochange, pat-reduction
 ---
 
 # Register an agent using a service principal
diff --git a/docs/pipelines/security/overview.md b/docs/pipelines/security/overview.md
@@ -2,7 +2,7 @@
 title: Secure your Azure Pipelines
 description: Guidelines and recommendations for securing pipelines.
 ms.assetid: 1ef377e9-e684-4e72-8486-a42d754761ac
-ms.custom: peer-review-program
+ms.custom: peer-review-program, pat-reduction
 ms.date: 03/04/2025
 monikerRange: "<=azure-devops"
 ms.topic: best-practice
diff --git a/docs/pipelines/security/secrets.md b/docs/pipelines/security/secrets.md
@@ -3,6 +3,7 @@ title: Secrets in pipelines
 description: Learn about best practices for protecting secrets in Azure Pipelines.
 ms.date: 09/10/2025
 monikerRange: "<=azure-devops"
+ms.custom: pat-reduction
 #customer intent: As an Azure Pipelines user, I want to understand best practices for using secrets in Azure Pipelines so I can limit and control access to secrets in pipelines.
 
 ms.topic: best-practice
diff --git a/docs/report/powerbi/client-authentication-options.md b/docs/report/powerbi/client-authentication-options.md
@@ -17,21 +17,9 @@ ms.custom: sfi-image-nochange, pat-reduction
 
 [!INCLUDE [version-lt-eq-azure-devops](../../includes/version-lt-eq-azure-devops.md)]
 
-[!INCLUDE [use-microsoft-entra-reduce-pats](../../includes/use-microsoft-entra-reduce-pats.md)]
-
-::: moniker range="azure-devops"
-
-When you connect from Power BI or Excel to Analytics by using the OData feed, choose **Microsoft Entra ID** for the most secure option.
-You can also authenticate with personal access tokens (PATs), but this method is less secure.
-
-::: moniker-end
+When you connect to [Analytics](../powerbi/what-is-analytics.md) from Power BI or Excel, you must authenticate to Azure DevOps. This article explains how to enter credentials, choose an authentication method, and update stored credentials when they expire or need to change.
 
-::: moniker range="<azure-devops"
-
-When you connect from Power BI or Excel to Analytics by using the OData feed, choose Windows credentials as the most secure option.
-You can also authenticate with personal access tokens (**PATs**), but this method is less secure.
-
-::: moniker-end
+[!INCLUDE [use-microsoft-entra-reduce-pats](../../includes/use-microsoft-entra-reduce-pats.md)]
 
 ## Prerequisites
 
diff --git a/docs/report/secure-your-analytics-reporting.md b/docs/report/secure-your-analytics-reporting.md
@@ -3,7 +3,7 @@ title: Secure your analytics & reporting
 titleSuffix: Azure DevOps
 description: Learn about security concepts, access controls, and best practices for protecting your analytics data and reports in Azure DevOps.
 ms.subservice: azure-devops-security
-ms.custom: horz-security
+ms.custom: horz-security, pat-reduction
 ms.author: chcomley
 author: chcomley
 ms.topic: overview
diff --git a/docs/repos/git/create-pr-status-server.md b/docs/repos/git/create-pr-status-server.md
@@ -8,7 +8,7 @@ ms.topic: tutorial
 ms.date: 02/24/2026
 monikerRange: '<= azure-devops'
 ms.subservice: azure-devops-repos-git
-ms.custom: devx-track-js, sfi-image-nochange
+ms.custom: devx-track-js, sfi-image-nochange, pat-reduction
 ai-usage: ai-assisted
 # customer-intent: As a developer, I want to create a Node.js server that integrates with Azure DevOps pull request events so I can implement custom status checks and automated validation workflows using Microsoft Entra ID authentication.
 ---
diff --git a/docs/service-hooks/authorize.md b/docs/service-hooks/authorize.md
@@ -1,9 +1,9 @@
 ---
 ms.subservice: azure-devops-service-hooks
 ms.topic: how-to
-title: Authorize Services 
-ms.custom: engagement-fy23
-description: Find out how to use OpenID Connect (OIDC)-based authentication to grant a service access to your Azure DevOps work items, source code, and other resources.
+title: Authorize Services
+ms.custom: engagement-fy23, pat-reduction
+description:Find out how to use OpenID Connect (OIDC)-based authentication to grant a service access to your Azure DevOps work items, source code, and other resources.
 ms.assetid: 314a28cd-b2ae-41a0-8dfb-330222c1aed0
 ms.author: chcomley
 author: chcomley
diff --git a/docs/service-hooks/consumers.md b/docs/service-hooks/consumers.md
@@ -1,7 +1,7 @@
 ---
 title: Service Hook Consumers
 description: Find information about Azure DevOps service hook consumers, including settings to use when you create subscriptions in Azure DevOps and configure consumers.
-ms.custom: engagement-fy23, devx-track-jenkins
+ms.custom: engagement-fy23, devx-track-jenkins, pat-reduction
 ms.assetid: CDACB8A1-4BAB-499F-B9ED-BD1680743B26
 ms.subservice: azure-devops-service-hooks
 ms.topic: overview
diff --git a/docs/service-hooks/create-subscription.md b/docs/service-hooks/create-subscription.md
@@ -2,7 +2,7 @@
 title: Create a Service Hook Subscription Programmatically
 description: Find out how to programmatically create a service hook subscription that prescribes an action to take when a specified event occurs in Azure DevOps.
 ms.assetid: 0614F217-4F4E-45DC-A50C-B9FF81F8A5BD
-ms.custom: engagement-fy23
+ms.custom: engagement-fy23, pat-reduction
 ms.subservice: azure-devops-service-hooks
 ms.topic: how-to
 ms.author: chcomley
diff --git a/docs/user-guide/troubleshoot-connection.md b/docs/user-guide/troubleshoot-connection.md
@@ -4,7 +4,7 @@ titleSuffix: Azure DevOps
 description: Learn how to resolve common connection problems, authentication errors, and permission issues when you access projects and organizations.
 ms.subservice: azure-devops-new-user
 ai-usage: ai-assisted
-ms.custom: copilot-scenario-highlight
+ms.custom: copilot-scenario-highlight, pat-reduction
 ms.author: chcomley
 author: chcomley
 ms.topic: troubleshooting
