Greetings to all you helpful people out there,
This might sound unusual but I'm looking to implement a secondary credential check in a PowerApp I'm building. The reason for this is the devices it will be run on are shared among users and some tasks in the app must only be carried out by qualified individuals. It's far too easy for a user in a depot/warehouse to pick up someone else's device off a workbench or from a charging dock and go to do some work while logged in as the wrong user, hence the need for a final password check before the work form is patched back to the system. A failure would result in an error message and no data updated.
I've attempted to build an http POST request in Power Automate but when testing it I get an error that suggests our MFA policy wants me to verify my request but can't:
"error": "invalid_grant",
"error_description": "AADSTS50158: External security challenge not satisfied. User will be redirected to another page or authentication provider to satisfy additional authentication challenges.
So my question is, other than turning off MFA (not an option) is there any other way around this? Or if not, is it possible to turn off MFA just for a specific flow?