The solution is to create a Personal Access Token (PAT), then configure git-tf to use your regular username and then use the PAT as the password.