Skip to main content
This page covers on-prem (self-hosted) setup. You register your own Entra ID (Azure AD) app so Azure DevOps OAuth runs against your tenant. For the hosted SaaS integration, see Setup → Azure DevOps.
You need permission to create App registrations in your Microsoft Entra ID tenant and to grant admin consent for the requested API permissions.
Create the OAuth app in the same Microsoft Entra ID tenant that your Azure DevOps organization is connected to. An app registered in a different tenant cannot authenticate against that Azure DevOps organization.

​
Register the Garth Assist app

1

Open the Azure portal

Sign in to the Azure portal and go to Microsoft Entra ID → App registrations.
2

Create a new registration

Click New registration and fill in the details below.Under Supported account types, select Accounts in any organizational directory (Any Microsoft Entra ID tenant - Multitenant) to enable multi-tenant support.
Replace <dns-host> with the DNS host of your on-prem Garth deployment — for example https://app.heygarth.ai/api/garth-assist/oauth/azuredevops/callback.
Click Register.
3

Create a client secret

Open Certificates & secrets → Client secrets and click New client secret. Set a description and expiry, then click Add. Copy the secret Value immediately.
The client secret value is shown only once. Copy and store it securely before leaving the page.
4

Add API permissions

Open API permissions → Add a permission and add the delegated permissions below, then click Grant admin consent for your tenant.Azure DevOpsMicrosoft Graph
All permissions are Delegated. After granting admin consent, each permission’s Status should show a green Granted for <tenant> check.

​
Environment variables

Record the following values for your on-prem deployment: