Microsoft is retiring Azure DevOps OAuth, the sign-in method Rewind has used to connect to Azure DevOps, by the end of 2026, and replacing it with Microsoft Entra ID (formerly Azure Active Directory). To keep your backups running, your Rewind connection needs to be switched to Entra ID before Microsoft turns the old method off. This article explains who needs to do it and how.
Before you begin
Before starting, confirm the following:
- The switch must be done by the person who originally set up the connection. This may not be your current Organization Owner, even if ownership has been transferred in Rewind since. Check the email address shown in the banner on your Azure DevOps page to see who set it up. If that person has left your company, the existing connection can't be switched. See The person who set up the connection has left.
- You need a work or school Microsoft account. Microsoft Entra ID doesn't support personal Microsoft accounts (such as Outlook.com or Hotmail addresses) for Azure DevOps yet. If your connection uses a personal account, there's nothing to do right now. See I use a personal Microsoft account.
Switch your connection to Microsoft Entra ID
- Log in to Rewind at app.rewind.com.
- In the left-hand panel, open Integrations, select Azure DevOps, then select the account you want to switch.
-
Near the top of the page, you'll see a banner titled Switch this connection to Microsoft Entra ID. Select Switch to Microsoft Entra ID.
-
On the Microsoft sign-in page, sign in with the account named in the banner.
- Review the permissions Rewind requests and select Accept.
- You'll be returned to Rewind. The banner disappears and your account now shows your organization's name.
What to expect next
Your next scheduled backup runs on the new connection. Your backup history, backup schedule and settings all stay as they are. You don't need to set up anything again, and there's no gap in your backups.
Limitations
-
Only the person who originally set up the connection can switch it
Transferring ownership in Rewind doesn't change this. If they've left, a new connection is set up instead, and past backups stay with the old one. Export anything you need from them. -
Personal Microsoft accounts aren't supported
Microsoft Entra ID doesn't support personal Microsoft accounts for Azure DevOps yet. -
Rewind can't switch the connection for you
Microsoft requires your organization to approve it. -
Your company may require admin approval
Depending on your Microsoft Entra settings, an admin may need to approve Rewind before the switch can be completed.
Frequently asked questions
Why do I need to do this?
Microsoft is retiring Azure DevOps OAuth, the sign-in method third-party apps like Rewind use to access Azure DevOps. Microsoft Entra ID is its replacement. Microsoft requires each organization to approve the new connection itself, so Rewind can't switch it for you.
When do I need to do it by?
Microsoft says the old sign-in method will be retired in 2026 but hasn't published an exact date. We recommend switching now so your backups aren't interrupted when it happens.
What happens if I don't switch?
Your existing backups stay in Rewind, but once Microsoft turns off the old sign-in method, Rewind can no longer take new backups of your Azure DevOps organization until the connection is switched.
Will I lose my backup history?
No. When the person who set up the connection does the switch, your backup history and settings carry over.
The person who set up the connection has left. What do I do?
Someone else at your company sets up a new Azure DevOps connection in Rewind: under Add new integration, choose Azure DevOps, then Add Account, and sign in with their own work account. Backups start again on the new connection.
Your past backups stay with the old connection. They don't move to the new one. If there's anything in them you'll need, we recommend exporting it from the old connection. Let us know at help@rewind.com once the new connection is set up, and we'll make sure you aren't billed for both.
Why can't the old connection be switched over?
Your current connection was set up under one person's Microsoft account, and it only works through that account. When that account is removed, Rewind loses access along with it, and there's no way to hand the connection to someone else without that person signing in. The new Microsoft Entra ID connection belongs to your organization instead of to one person, so once you've switched, a team member leaving won't interrupt your backups again.
I use a personal Microsoft account. What should I do?
Nothing for now. Microsoft doesn't yet support personal accounts for Azure DevOps through Entra ID, so your connection stays on the current sign-in method. We'll contact you when there's a path forward.
Do I still need to enable "Third-party application access via OAuth" in Azure DevOps?
No. That policy only applies to the old sign-in method. The Microsoft Entra ID connection doesn't need it.
I see a message that my organization is already linked to another Rewind account.
Your Microsoft organization is already connected to a different Rewind account. Contact help@rewind.com and we'll help you sort out which account it should belong to.
Microsoft says I need admin approval. What do I do?
Some companies only allow a Microsoft Entra admin to approve new apps. If Microsoft asks for admin approval when you sign in, ask your Microsoft Entra admin to approve Rewind, then select Switch to Microsoft Entra ID again. If your company has an approval request process, you can send the request straight from the Microsoft screen.
Related articles
- Introducing Azure DevOps Backups by Rewind — How to set up a new Azure DevOps connection in Rewind.
- Reconnecting your Azure DevOps account to Rewind — How to reconnect an Azure DevOps account for reasons other than the Microsoft Entra ID switch.
- What does Rewind backup and restore for Azure DevOps? — The full list of Azure DevOps items Rewind backs up and restores.
Need help?
If you have questions or need assistance, contact help@rewind.com or submit a request.