In all jobs using the TFS pulgin to get their sources, do not input any credential (and so use the application server credentials, a.k.a. SSO).
At startup you get an UnsatisifedLink exception because CredentialsUtils.supportsDefaultCredentials(), that use native libraries, is called before the system property locating the native libraries directory is set.

In the constructor of hudson.plugins.tfs.model.Server, the ensureNativeLibrariesConfigured() method must be called before the call to CredentialsUtils.supportsDefaultCredentials().

Current workaround: set the system property (com.microsoft.tfs.jni.native.base-directory) by hand in the application server through the JVM startup command-line.