Adding Fortify on Demand credentials in Azure DevOps

Before adding a Fortify on Demand task to your pipeline, you need to obtain appropriate Fortify on Demand credentials and add them in Azure DevOps. Service connections are used to manage Fortify on Demand credentials in Azure DevOps. You can create a Fortify service connection to store Fortify on Demand credentials.

To add your Fortify on Demand credentials in Azure DevOps:

  1. In an Azure DevOps project, navigate to the project settings .
  2. Under Pipelines, select Service connections.

  3. Click New service connection.

  4. Select Fortify from the list and click Next.

    The Add Fortify service connection window appears.

  5. Select the method of authentication:

    • Basic Authentication: requires personal access token with the api-tenant scope

    • Token Based Authentication: requires API key with the api-tenant scope

    See the Fortify on Demand documentation for instructions on creating a personal access token and API key.

  6. Complete the following fields:

    Field Description
    Connection name Specify a name for your service connection.
    API URL

    Specify your data center's API root URL:

    • US: https://api.ams.fortify.com
    • EMEA: https://api.emea.fortify.com
    • APAC: https://api.apac.fortify.com
    • SGP: https://api.sgp.fortify.com
    • FedRAMP: https://api.fed.fortify.com
    • Trial: https://api.trial.fortify.com
    Portal URL

    Specify your data center's domain URL.

    Proxy Host (optional) Specify the URL of the proxy server.
    Proxy Port (optional) Specify the port of the proxy server.

    Username, Personal Access Token, Tenant ID

    API Key, API Secret
    • If you selected Basic Authentication, specify the account username, personal access token, and tenant code.
    • If you selected Token Based Authentication, specify the API key and secret.

  7. Click OK.

    Your new service connection is saved.