My TFS credentials are different from my windows credentials. To be more precise, here is
how my credentials look like
For my workstation
DomainXXX\myname
password
For TFS
DomainYYY\someothername
somepassword
The problems
Every time I use the command "tfpt online" in the power tools, it
prompts me for credentials. There is no "remember me" option.
Every time I open a new Visual Studio instance and say 'connect to
TFS', it prompts for credentials. There is no option to remember /
save password
Tried and failed attempts
I tried adding the TFS credentials in the credential manager of windows. Also added the server name to 'trusted sites' in internet options -> Security settings. These did not solve the original problem.
Related
I have just changed my Azure portal login password as it was about to expire in next 4 days. After this when I tried to deploy my cloud service VS 2013 ask "ReEnter Credentials your Credentials", After entering new credentials it keep asking me ReEnter your credentials also No subscription shows.
I tried to log in via Server Explorer also but the same problem occurs with Object Reference not set to an instance of an object error.
Can anyone have the solution of this?
Many thanks.
I have had this before on VS2015, the following worked for me:
Reboot and sign in (to ensure there are no processes locking relevant files)
Delete the folder %LOCALAPPDATA%.IdentityService
Go to Control Panel -> User Accounts -> Credential Manager and removing associated web and windows credentials
Delete the contents of %temp%
If that fails, try running Visual Studio as administrator and sign in again.
I use to sign-in to server explorer & query AzureTable entities.
However since I have updated to Visual Studio Update 4, I have not been able to login.
I tried using same credentials on azure portal & they work perfectly fine.
Visual Studio
Sorry, but we're having trouble signing you in
User account you used to sign in is not supported for this
application. Please use a different account to sign in.
To my surprise, Google did not return any relevant search result for this error.
P.S. I have double checked my Microsoft account credentials & they are working. This issue has been happening with other team members on different PCs as well.
I have learned to live with this error. This is definitely a bug in VS-2013 Update 4 which Microsoft should look into.
I use to sign-out from current subscription in Azure
Right click Azure in server explorer
Click Connect to Microsoft Azure Subscription
It works for one and only time. Next time repeat the process 1 to 3 again.
I believe I've had the exact same issue. Here's how I resolved it:
In the log-in page that "pops up" from Visual Studio I deleted the Microsoft account id that I usually sign in with and entered a different account ID that I own.
As soon as I finished typing the account id in, the page was refreshed and I was redirected to a Microsoft account log-in page. In that log-in page I made sure to type in the correct Microsoft account ID (the one I use for Azure) and its password. Having successfully signed in there, I was able to continue working as usual.
This was roughly based on guidance I found in this Microsoft Technet discussion.
Same here with Visual Studio 2015. I did logout user from visual studio and log in again and problem went away for good.
I recently received the same error after deploying an app to Azure and trying to connect to a DB server I had launched. When you first create an account, MS gives you a default active directory where you're sign in account is assigned the role of global administrator. You need to create a user account for this directory and use these credentials to sign in (different from signing into Visual Studio, you're providing credentials to access something on Azure).
In the Azure Portal, open up Active Directory and click on the default directory (or whichever one your project lives in). Go to the Users tab and select "Add User" from the panel at the bottom of the window. For "Type of User" select "New user in your organization", fill in the rest of the details and create the account. You get a temporary password and an awkward username. Now if you refresh server explorer you should be able to enter these credentials (and get prompted to enter a new password).
Just wanted to inform all of you that I had the same problem. Since this Sunday it disappeared magically on my VS 2013 Update 4 on all my machines. Here are my experiences:
Last week I had to re-enter my subscription after any VS-restart.
Sunday I opened VS and I was asked to reenter my VS-credentials in the upper-right corner.
I did not reenter my VS-credentials but simply expanded "Azure" in the Server Explorer and then expanded "SQL Databases" which led to the login-prompt formerly. Now the "Server Explorer" acted as expected.
I thought that the missing VS-login was the solution but I was wrong. Even with my VS logged on I know can restart the Studio as many times I want -> it works.
To ensure this I did several restarts of my machine too.
This is a stuff up on Microsoft's side, just replace your email address with one that isn't linked already and it will work.
To fix it: Use your a different email address with the same account through visual studio.
Update
I managed to solve it by getting my user granted permissions to remotely connect to the desktop using credential set 2 and thus being able to remove the stored credentials from Credential Manager.
I log onto my server with one set of credentials and open Visual Studio 2012 using "Run as different user" (Shift + Right-click) as I need a second set of credentials to deploy to my dev. env. SharePoint site.
I have previously done above and then connected to TFS using a third set of credentials, as the my user (second set credentials) didn't have access yet. Now my user have access and I wish to use these credentials instead.
TFS automatically logs me in with the third set credentials every time I open VS using "Run as different user" - However, if I open VS normally without using "Run as different user" I get prompted for login to the TFS.
I have tried checking the Windows credentials and there is nothing there. And I can't log onto the server using the second set credentials as only the first set can access the server with Remote Desktop.
So how do I "clear" cached TFS credentials when using "Run as different user"?
Go to control panel > User Accounts > Manage Your Credentials > select your Team foundation Server and choose remove/edit - viola! Next time you go into Team Explorer you will be prompted for a new set of credentials.
Ref: http://blogs.msdn.com/b/visualstudioalm/archive/2012/08/29/clearing-the-credentials-for-connecting-to-a-team-foundation-server.aspx
You can try clearing the cache manually here:
C:\Users[USERNAME]\AppData\Local\Microsoft\Team Foundation\5.0\Cache
You could also try using the /profile parameter and specifying the username's profile when you run it.
Runas /profile /user:[DOMAIN]\[administrator] "C:\Program Files (x86)\Microsoft Visual Studio 12.0\Common7\IDE\devenv.exe"
http://technet.microsoft.com/en-us/library/bb490994.aspx
For me it was not username/PASSWORD, but the cached username that was the issue. And that IS stored in VersionControl.config in the cache. Whacking just that file was enough to get TFS to stop trying to connect with the old email.
I ran into this issue as well, but clearing out the AppData settings didn't help.
I had created a console application to connect to TFS and it prompted me for credentials the first time I ran it. After that, the credentials were stored and would supersede any other credentials I provided. I finally figured out that VS had added a registry entry in:
HKEY_CURRENT_USER\Software\Microsoft\VSCommon\14.0\ClientServices\TokenStorage\VisualStudio\VssApp
Deleting the key worked, but I also discovered that one can accomplish the same programmatically:
var clientCredentails = new VssClientCredentialStorage();
// URI of the target TFS server
var tfsUri = new Uri("https://[username].visualstudio.com/DefaultCollection/");
// Find the cached credentials
var federatedCredentials = clientCredentails.RetrieveToken(tfsUri, VssCredentialsType.Federated);
// Remove the credentials from the cache
clientCredentails.RemoveToken(tfsUri, federatedCredentials);
I had a similar problem where I needed to log into a local TFS as another account than my Windows account (found in Active Directory which TFS is connected to) - but I could not see any credentials in the manager.
The solution was to disconnect inside VS (Menu Team->Disconnect).
Then create a Windows account in the Credentials Manager with the same user as my Windows user - but with a password that is incorrect. The URL/server was just "tfs" (no port etc).
When I start VS it fails the login to TFS and asks for correct password and username too. Then I can change this to another user and VS default to this the next time.
I have the TFS power tools installed, and I can see the shell extensions context menus; however, I can't find a way to bypass the integrated windows authentication and specify a new username per operation. I am using a common username on a server due to some legacy software, and I need to access TFS with a different domain user. Is there an option to do this on the fly?
I expected to receive a prompt when connecting, but I just get an error indicating that the current user doesn't have permissions.
If you want to ALWAYS use a certain user name & password when authenticating to a TFS server then you can use Windows Credentials Manager and add a new Windows Authentication entry. You type in the full server name, domain username, and password. Additionally, you'll want to add the server name into the "Trusted Sites" list in Internet Explorer.
Just remember to edit that entry in the future if you ever need to change it like when the account's password has been updated. You'll be pulling out your hair until you remember that it is in there.
Is there a way to force sharepoint 2010 to popup the dialog to ask the user for a username and password and not use the computers logged in user, if that user doesn't have access.
We need an internal sharepoint website to not use the windows credentials, since these are computers used by many people. The windows user doesn't have access to the site, so currently it shows an access denied, click here to log in as another user. We would prefer if it just asked for credentials in a more graceful manner.
There is a way to configure Internet Explorer to do this. In Internet Explorer(IE),
Go to Tools
Click Internet Options
Click on the Security tab
Click on the button labeled Custom Level.
Scroll to the very bottom of the list
Select the option labeled Prompt for user name and password.
The default option Automatic logon only in Intranet zone' is what is causing IE to send the credentials to SharePoint. This of course would force everyone to log in on that computer.
Forms Based Authentication is the answer. You can modify the Login page and even where the users credentials (username/password) are stored (e.g. a SQL database rather then AD).
Use browser other than IE to access the SharePoint site from the community computers.
I am guessing you work in a corporate environment, which would mean your computers are probably managed by your IT department and part of your domain. Because they are part of your company's AD (Active Directory), your systadmins Should be able to modify the existing policy (i say existing, because in IE, the defaults for the settings relating to logging on are by default set so that you WOULD have gotten a logon prompt, i am guessing a group policy is already in effect). If it does not exist, have your admins create one.
The setting Jeremy mentions is one option. It could also be that the site is in included in your IE's "Local Intranet Zone". If it is, or, more probable, there is a wildcard *.yourdomainname.yourdomainextension).
Use the setting mentioned by jeremy to override the default logon behavior (automatic logon) associated with sites listed in the intranet zone.
A group policy can be applied to a group of computers or all the computers in the domain. If the policy should be applied to a small group of computers only, put those computers in a separate OU (Organisation Unit) in AD and apply the policy to that OU.
What about creating a new zone, secured with FBA, for those community computers? As long as the users of the community computers are given only URL for the new zone, you should be OK.
You can create 2 registry files to turn this behavior on and off for the Internet Explorer. Use Notepad to paste the values below, ensure that Windows Registry Editor Version 5.00is the first line, and that you're appending 2 blank lines at the end of the file (press 2x Enter).
To turn it on (i.e. always ask for credentials): AlwaysAsk.reg
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet
Settings\Zones\1] "1A00"=dword:00010000
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet
Settings\Zones\1] "1A00"=dword:00010000
To turn it off (automatically use credentials, only ask if necessary): AutomaticLogon.reg
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet
Settings\Zones\1] "1A00"=dword:00020000
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet
Settings\Zones\1] "1A00"=dword:00020000
This is useful for testing, espcecially if you're a developer in a corporate environment where you can't easily change the policy settings on your PC (but you need elevated rights, i.e. you have to run it as Administrator).
Note that the 1st key is for the local machine, the 2nd key is for the current user (currently logged in), which is needed to activate it immediately.
If you need more details about the values, check out this link:
Internet Explorer security zones registry entries for advanced users