Configuring Connections

Azure DevOps

There are two types of Azure DevOps connections in TeamCity:

• Azure DevOps OAuth 2.0 allows signing in to TeamCity via an Azure DevOps Services account.

• Azure DevOps PAT allows creating TeamCity projects from Azure Git and TFVC repositories.

Bitbucket Cloud

A connection to Bitbucket Cloud can be used to:

• Create a project from Bitbucket URL.

• Create a VCS root from URL.

• Create a Mercurial VCS root.

• Integrate with a Bitbucket Cloud issue tracker.

• Enable BitBucket Cloud authentication.

The Bitbucket Cloud connection form provides multiple parameters. You need to use them for creating a new OAuth consumer in Bitbucket.

After the consumer is created:

1. Copy its key and secret.

2. Go back to the connection form in TeamCity.

3. Paste the key and secret.

4. Save the connection.

A Bitbucket icon will become active in several places where a repository URL can be specified. Click it to authorize TeamCity in your Bitbucket profile. TeamCity will be granted access to your repositories. If you configure multiple Bitbucket connections, the server URL will be displayed next to each icon, so it is easier to distinguish the server in use.

GitHub

There are two types of GitHub connections: GitHub Enterprise and GitHub.com. Choose it depending on your GitHub account type.

A connection to GitHub can be used to:

• Create a project from GitHub URL.

• Create a VCS root from URL.

• Create a Git VCS root.

• Integrate with a GitHub issue tracker.

• Enable GitHub.com authentication.

The GitHub connection form provides multiple parameters. You need to use them to create a new OAuth application in GitHub.

After the app is created:

1. Copy its client ID and secret.

2. Go back to the connection form in TeamCity.

3. Paste the GitHub server URL (only for Enterprise) and the app ID and secret.

4. Save the connection.

If you use a GitHub Enterprise server with HTTPS, you need to also upload its HTTPS certificate as described here.

A GitHub icon will become active in several places where a repository URL can be specified. Click it to authorize TeamCity in your GitHub profile. TeamCity will be granted full control of your private repositories and get the Write repository hooks permission. If you configure multiple GitHub integrations, the server URL will be displayed next to each icon, so it is easier to distinguish the server in use.

GitLab

There are two types of GitLab connections: GitLab CE/EE and GitLab.com. Choose it depending on your GitHub account type.

A connection to GitLab can be used to:

• Create a project from GitLab URL.

• Create a VCS root from URL.

• Integrate with a GitLab issue tracker.

• Enable GitLab.com authentication.

The GitLab connection form provides multiple parameters. You need to use them to create a new OAuth application in GitLab.

After the app is created:

1. Copy its client ID and secret.

2. Go back to the connection form in TeamCity.

3. Paste the GitLab server URL (only for CE/EE) and the app ID and secret.

4. Save the connection.

If you use a GitLab CE/EE server with HTTPS, you need to also upload its HTTPS certificate as described here.

A GitLab icon will become active in several places where a repository URL can be specified. Click it to authorize TeamCity in your GitLab profile. TeamCity will be granted access to your repositories. If you configure multiple GitLab connections, the server URL will be displayed next to each icon, so it is easier to distinguish the server in use.

Docker Registry

A connection to Docker Registry can be used to:

• Sign in to an authenticated Docker registry before running a build / sign out after the build.

• Clean up published images after the build.

See more information in the dedicated article.

Amazon ECR

An Amazon ECR (Elastic Container Registry) connection allows accessing private and public AWS registries. With its help, the Docker Support build feature can store Docker images produced by a build to AWS.

Connection settings:

Slack

This type of connection is used to enable notifications via Slack.

Before configuring a Slack connection, you need to create a Slack app with the following bot token scopes: channels:read, chat:write, im:read, im:write, users:read, team:read, groups:read. You can add these in Features | OAuth & Permissions | Scopes of your Slack app.

To ensure your TeamCity server can connect to Slack, specify its address as Redirect URL in Features | OAuth & Permissions.

Now you can return to TeamCity, add a new Slack connection, and enter the following connection parameters:

• Client ID and secret from the app's Basic Information page

• A bot user token of your app

Save the connection and proceed with adding a Notifier build feature.

JetBrains Space

This type of connection can be used for:

• Publishing build statuses in JetBrains Space with the help of Commit Status Publisher.

• Authenticating in TeamCity with a JetBrains Space account.

• Creating projects, build configurations, and VCS roots from a JetBrains Space repository.

• Starting builds on merge requests created in a JetBrains Space repository.

Before configuring this connection, you need to create a dedicated application in JetBrains Space:

1. Go to Administration | Applications and click New application.

2. Enter a convenient name and save the application.

3. Go to the app's Authorization tab and click Configure requirements under the In-context Authorization section. Enter the name of the Space project you are about to access from TeamCity.

4. Now, you need to set permissions that will be granted to the app in this project. Click Configure and enable the following permissions:

   • Required for authentication and Pull Requests:

     • Members | View member profile

   • Required for Commit Status Publisher:

     • Git Repositories | Report external check status

   • Required for Pull Requests:

     • Code Review | View code reviews

   You can approve project-level permissions right in this Authorization tab if you are the project's administrator. Global permissions like viewing a member profile require a server administrator's approval.

5. Go back to the app's Overview and open the Authentication tab.

6. Enable Client Credentials Flow.

7. To be able to use authentication via Space in TeamCity or/and to create projects/configurations from Space repositories, enable Authorization Code Flow as well. Enter your TeamCity server's URL as the redirect URI.
   To ensure that your TeamCity server can always connect to JetBrains Space, specify all the other possible endpoint addresses of the server. In most cases, it would be enough to specify the Server URL set in Global Settings in TeamCity. However, if you use a proxy for your TeamCity server but access this server directly, the authentication might not work unless the server's IP address is also specified here.

8. Copy the app's Client ID and Client secret.

Note: When you create a project in JetBrains Space, it does not automatically add you to this project as a member — this needs to be done manually. TeamCity will be able to see only those projects where you are listed as a member.

Now you can return to TeamCity, add a new JetBrains Space connection, and enter the following connection parameters:

• URL of the Space server

• Client ID and secret of your Space application

Save the connection and proceed with adding a Commit Status Publisher or Pull Requests feature, enabling Space authentication, or creating a project/build configuration/VCS root.

NPM Registry

This type of connection allows accessing a private npm registry during a build.

Connection settings:

Save the connection and proceed with adding an NPM Registry Connection build feature.

Perforce Administrator Access

This type of connection allows processing task streams on your Perforce server. In the connection settings, enter the host and user credentials for accessing the Perforce server (the user must have the admin permission).