HTTP with Entra ID connector - App user needs to type in Base URL and App ID

(0) Share

Report

Posted on by Christopher5

My canvas app is using a Power Automate flow, which uses the HTTP with Entra ID connector (NOT the 'preapproved' one).

With this connector's action, an Azure Function is triggered, which gives me a response back that I return to the app.

The issue is that, when the users open the app for the first time, they are asked to provide the Application ID and Base URL of this Azure Function.

What makes it worse, is that I set up two such connectors which each trigger a different Azure Function, and it's impossible (see below) to determine which Azure Function's information the user needs to type into each prompt.

How could I avoid having the user type in this info?

Thanks in advance for any suggestions!!

Categories:

Power Apps Pro Dev & ISV

Image202412120144...

I have the same question (0)

All responses (3)

Answers (0)

Suggested answer

SaiRT14 1,990 Super User 2025 Season 2 on at

Like (0)

Report

pls try the following:

Go to the Azure Portal and navigate to Azure Active Directory > App registrations. Click New registration: Name: Provide a name for the app (e.g., "Azure Function Caller"). Redirect URI: Leave blank for now. Note the Application (Client) ID and Directory (Tenant) ID.

Under the app's settings, navigate to API Permissions. Click Add a permission > APIs my organization uses, and select your Azure Function's API or a relevant resource. Grant the required permissions (e.g., Function. ReadWrite if applicable). Click Grant admin consent to ensure all users inherit these permissions.

Go to the Certificates & secrets section. Click New client secret, provide a description, and set an expiration period. Save the secret and copy its value. You will need it later.

In Power Automate, go to Data > Connections and locate the HTTP with Azure AD connector. Edit the connection or create a new one: Base Resource URL: Provide the URL of your Azure Function App. Tenant ID: Use the Directory (Tenant) ID from your registered app. Client ID: Use the Application (Client) ID. Client Secret: Use the secret value you created earlier.

In your Azure Function, ensure the Authentication/Authorization settings are configured to accept requests authenticated via Azure AD. Validate the incoming token from the HTTP request to confirm it's from the expected client.

Was this reply helpful? Yes No
bscarlavai33 738 Super User 2025 Season 2 on at

Like (0)

Report

Try this - https://learn.microsoft.com/en-us/connectors/webcontentsv2/#authorize-the-connector-to-act-on-behalf-of-a-signed-in-user

Was this reply helpful? Yes No
Christopher5 27 on at

Like (0)

Report

@SaiRT14 thank you for your answer.

This is how I have set it up:

> I have set up an Enterprise Application with the specific Application Id d2ebd3a9-1ada-4480-8b2d-eac162716601(PowerPlatform-webcontentsv2-Connector). This seems to be the app Power Platform uses by design to make the API call.

> Through the Azure Portal I have granted this new Enterprise Application the right to call my Azure Function.

FYI - The connector HTTP with Entra ID only requires the Base URL and Application ID to be given, it does not ask for a secret nor the tenant ID.

Does this description above change what you suggest?

Users ARE able to use the app and the functions are called correctly. I just want to avoid the user having to give the Base URL and Application ID when they log into the app for the first time (see the attachment in my initial post).

Was this reply helpful? Yes No