Skip to main content

Azure DevOps integration

Connect Sally AI with Azure DevOps to turn meeting insights into real work - directly in your project boards. With the Sally Azure DevOps integration you can create work items or add comments to existing ones with one click, avoid double entry, and keep your DevOps board up to date.


Quick Navigation

  1. How to connect Azure DevOps with Sally AI
  2. How to send insights to Azure DevOps
  3. Required OAuth Scopes

1. How to connect Azure DevOps with Sally AI

Follow these steps to enable the Sally Azure DevOps integration.

  1. Open Settings in the left sidebar.

    Open Settings in Sally
    Figure 1: Go to Settings
  2. Go to Integrations and click "+ Add integration" under "Your personal integrations".

    Open Integrations and click Add integration
    Figure 2: Add integration
  3. Select Azure DevOps from the list and hit Connect. Complete the OAuth flow in Azure DevOps.

    Azure DevOps in the integrations list with Connect button
    Figure 3: Choose Azure DevOps → Connect
Important - Sally will request your Azure DevOps URL

During the connection setup, Sally will ask you to enter your Azure DevOps URL.
Make sure you paste only your organization’s base URL (no project/repo/path).

Example

  • Full URL (to a specific PR): https://dev.azure.com/fabrikam/ProjectX/_git/WebPortal/pullrequest/860
  • What to enter in Sally: https://dev.azure.com/fabrikam

If your URL looks like https://dev.azure.com/<org>/<project>/..., only the https://dev.azure.com/<org> part is required.


  1. After a successful connection, Azure DevOps appears under "Your personal integrations".

    Azure DevOps listed under Your personal integrations
    Figure 4: Azure DevOps is connected

2. How to send insights to Azure DevOps

Once Azure DevOps is connected, you can send meeting insights from Sally to Azure DevOps with a single click - so they land in the right project.

You can:

2.1. Create a work item in Azure DevOps

Turn a Sally insight into an Azure DevOps work item.

  1. Open the desired meeting in Sally.

  2. Hover any insight, decision, next step, or task in the summary, click the Azure DevOps icon, then choose “Create work item in Azure DevOps”.

    Azure DevOps action menu with Create work item
    Figure 5: Choose the Azure DevOps action
  3. Fill in the creation form (required fields are marked with *). For Azure DevOps this typically includes:

    • Project*
    • Work item type* (e.g., Task, Bug, Change Request)
    • Responsible user*
    • Area*
    • Iteration*
      The title and description are prefilled from Sally and can be edited.
    Create work item in Azure DevOps modal with fields Project, Work item type, Assignee, Area, Iteration
    Figure 6: Fill the Azure DevOps fields and Create
  4. Click Create to send it to Azure DevOps.


2.2. Add a comment to an Azure DevOps item

Turn a Sally insight into an Azure DevOps work item.

  1. Open the desired meeting in Sally.

  2. Hover any insight, decision, next step, or task in the summary, click the Azure DevOps icon, then choose “Add a comment to an Azure DevOps item”.

    Azure DevOps action menu with Create work item
    Figure 5: Choose the Azure DevOps action
  3. Fill in the creation form (required fields are marked with *). For Azure DevOps this typically includes:

    • Project*
    • Work item type* (e.g., Task, Bug, Change Request)
    • Responsible user*
    • Area*
    • Iteration*
      The title and description are prefilled from Sally and can be edited.
    Create work item in Azure DevOps modal with fields Project, Work item type, Assignee, Area, Iteration
    Figure 6: Fill the Azure DevOps fields and Create
  4. Click Create to send it to Azure DevOps.


3. Required OAuth Scopes

For the integration with Azure DevOps, Sally uses OAuth 2.0 for authorization. The following scopes define which areas Sally can access on behalf of the authenticated user.

Disclaimer
  1. Sally accesses this information solely to technically establish and maintain the connection to the user account.

  2. Sally does not make any autonomous changes. Actions are performed exclusively upon the explicit initiative of the user.

  3. API endpoints are only called within the scope of an active action initiated by the user within the platform.

Technical Overview of Required Scopes

ScopeTypeWhat Microsoft technically allows with this scopeHow Sally uses this scope
user_impersonationDelegatedAPI access in the context of the authenticated userPart of the Azure authentication model. Sally uses this scope solely for the technical execution of the integration within the authenticated user session.
vso.work_writeDelegatedAPI permission for work item objectsTechnically defined within the Azure DevOps OAuth model. Sally does not independently modify existing work items outside explicitly user-initiated actions.
vso.code_writeDelegatedAPI permission for repository resourcesPart of the Microsoft permission model. Sally does not modify source code or independently access repositories.
vso.project_writeDelegatedAPI permission for project configurationTechnically provided by Microsoft for integrations. Sally does not modify project configurations.
vso.wiki_writeDelegatedAPI permission for wiki resourcesPart of the OAuth model. Sally does not independently create or modify wiki content.
vso.taskgroups_writeDelegatedAPI permission for task group resourcesTechnically required within the integration permission structure. Sally does not independently manage task groups.
vso.memberentitlementmanagementDelegatedAccess to organization and license informationPart of Microsoft’s API structure. Sally does not modify user or license configurations.
vso.profileDelegatedAccess to user profile informationSally reads basic profile information for authentication purposes. No profile data is modified.
emailDelegatedAccess to the user’s email addressSally reads the email address to uniquely identify the connected account.
User.ReadDelegatedRead basic user informationPart of Microsoft Identity authentication.
profileDelegatedAccess to basic profile dataSally reads basic account information for identification purposes.
openidDelegatedOpenID Connect authenticationSecure authentication via Microsoft Identity.
offline_accessDelegatedIssuance of long-lived access tokensEnables a stable connection without repeated login. No Azure DevOps data is modified.