E Signature at control level as compliance

VivekSah 

To achieve the desired functionality of re-authenticating and capturing additional information when changing the state of a test case in Azure DevOps, you can consider implementing a custom extension or using a combination of existing features within Azure DevOps. Here's a suggested approach:

1. Custom Extension: Develop a custom extension using Azure DevOps extension framework (VSTS DevOps Extensions or Azure DevOps Extensions). The extension can include a custom work item control or a custom rule that triggers a pop-up dialog when the state of a test case is changed.

- Within the custom extension, you can implement a pop-up dialog that prompts the user to re-authenticate with their username and password.
- Capture the username and any additional comments entered by the user in the pop-up dialog.
- Use Azure DevOps REST APIs or Azure DevOps SDK to update the discussion/comments section of the test case work item with the captured information.

2. Custom Workflow with Automation: If you prefer not to develop a custom extension, you can leverage the existing features and automation capabilities within Azure DevOps to achieve a similar outcome:

- Create a custom workflow using Azure Pipelines, Azure Logic Apps, or Azure Functions.
- Configure the workflow to trigger when the state of a test case changes.
- Within the workflow, include an action to send an email notification to the user responsible for the test case, asking them to re-authenticate and provide additional comments.
- Capture the user's response and comments.
- Use Azure DevOps REST APIs or Azure DevOps SDK to update the discussion/comments section of the test case work item with the captured information.

In both approaches, it is important to ensure compliance and security by handling and storing sensitive information securely. Consider encrypting the authentication details and following security best practices.

It's worth noting that Azure DevOps is a flexible platform, and the suggested approaches may require some custom development or configuration to meet your specific requirements. Assess the complexity, compliance needs, and technical feasibility of each approach before making a decision.