# GET /oauth2/authorize is deprecated

app.vssps.visualstudio.com deprecated GET /oauth2/authorize without giving a shutdown date yet.

The provider deprecated Azure DevOps OAuth and scheduled it for removal in 2026 without an exact shutdown date. Calls to the GET /oauth2/authorize endpoint will fail once removed. Existing applications using this authentication flow are affected.

## What to use instead

Register an app in Microsoft Entra ID and retrieve tokens using the Microsoft Entra token endpoint with the Azure DevOps scope 499b84ac-1321-427f-aa17-267ca6975798/.default. The transition requires a new app registration in a Microsoft Entra tenant and does not support personal Microsoft accounts.

Moving to Microsoft Entra ID OAuth needs a new app registration in a Microsoft Entra tenant; it does not work with personal Microsoft accounts.

- API: app.vssps.visualstudio.com (app.vssps.visualstudio.com)
- Kind: Endpoint removal
- Takes effect: no date given yet
- Calls after that day: fail
- Calls it hits: `GET /oauth2/authorize`
- Source: [Announcement](https://learn.microsoft.com/en-us/azure/devops/integrate/get-started/authentication/azure-devops-oauth)
- Verified: October 27, 2026, against app.vssps.visualstudio.com's own pages
- Page: https://www.okapi.bot/providers/app-vssps-visualstudio-com/breaking-changes/get-oauth2-authorize-is-deprecated/

## app.vssps.visualstudio.com's words

> Azure DevOps OAuth is deprecated and scheduled for removal in 2026. This documentation is for existing Azure DevOps OAuth apps only.

Okapi finds the calls this change hits in your repo and opens the pull request with the fix: https://github.com/apps/okapi-agent