One Minute Fixes - Updating SPN Secrets

We all know that when using proper ALM in Power Automate SPN's are the way to go. Sadly not all connections use them, and the ones that do have challenges.

One of my most recent challenges was updating a secret for a Dataverse connection in a prod environment.

Unfortunately you can't simply update the connections secret, you have to create a new connection. Additionally you cant create the connection in the connections section in the studio, you can only set a spn when you create a connection inside the flow builder.

Above shows no spn option when creating connection inside connection section

So you have to:

• Create new flow
• Create new connection
  
• Update connection reference with new connection

Luckily there is a better way. I found a api that can update the secret in the actual connection.

https://api.powerapps.com/providers/Microsoft.PowerApps/apis/{environmentId}/connections/{connectionId}?api-version=2016-11-01&createConnectionReference=true&solutionId=~preferred&$filter=environment eq'{environmentId}'

{
  "properties": {
    "connectionParameters": {
      "token:clientId": "{clientId}",
      "token:clientSecret": "{secret}",
      "token:TenantId": "{tenantId}",
      "token:grantType": "client_credentials"
    },
    "displayName": "{connectionDisplayName}",
    "environment": {
      "name": "{environmentId}"
    }
  }
}

To update the connection I use a flow using the HTTP with 'Microsoft Entra ID (preauthorized)' connector and the following setup: