AZDO.1001: Identities can connect to your organization's Git repos through SSH.
| ID | AZDO.1001 |
| Severity | High |
| Suite | Mito |
| Product | Azure DevOps |
| Feature | Security policies |
| Security area | Authentication |
| Resource type | Tenant |
| User impact of fixing | Medium |
| Effort to fix | Medium |
| MITRE ATT&CK | T1552.004, T1098.001 |
| Reads from | Azure DevOps |
| Further reading | https://aka.ms/vstspolicyssh |
What this checks and how to fix it
Section titled “What this checks and how to fix it”Connecting to Azure DevOps using SSH should be disabled.
Rationale: OAuth is the preferred and most secure authentication method.
Remediation action
Section titled “Remediation action”Disable the policy to stop these requests and notifications.
- Sign in to your organization.
- Choose Organization settings.
- Select Policies under the Security section.
- Locate the “SSH authentication” policy and toggle it to off.
Results: Users can no longer use SSH to connect to Azure DevOps.
Related links
Section titled “Related links”Mito check. Author: SebastianClaesson. Open-source licences.
Open-source licences. CIS Benchmark material © Center for Internet Security, Inc.; CISA SCuBA baselines are public domain (CC0).
© 2026 Virtual Petals. Mito is a Virtual Petals service, hosted in Microsoft Azure UAE North.