OAUTH 2.0 Implicit Flow Authentication - Custom Connector

(0) Share

Report

Posted on by ashiqf

124

Hi!

Do custom connector support OAUTH implicit flow authentication without using a Client Secret? I don't see an option to use Implicit flow, it seems the client secret is a mandatory information. Could you please confirm this

The plan is to secure an API using Azure AD app and then create a custom connector using the AD App.

Categories:

Building Power Apps

I have the same question (0)

All responses (3)

Answers (1)

v-yutliu-msft on at

Like (0)

Report
Hi @ashiqf ,

Do you mean that you do not know what to fill in client id and client server?

Actually, yo do not need another client server.

You could use Azure Active Directory with a custom connector in Power Automate.

You just need to enable authentication in Azure Active Directory, register one of the Resource Manager APIs as a custom connector, and then connect to it in Power Automate.

Then you could use the information in Azure Active Directory to fill in client id and client server.

Here are two docs about how to do this in details for your reference:

https://docs.microsoft.com/en-us/connectors/custom-connectors/azure-active-directory-authentication

https://community.dynamics.com/365/b/sachinbansalmicrosoft/posts/powerapps-secure-your-azure-function-and-custom-connector-with-azure-ad

Under Client id, enter the AAD application ID value you copied earlier.

For client secret, use value you copied earlier.

Best regards,

Was this reply helpful? Yes No
ashiqf 124 on at

Like (0)

Report

Hi @v-yutliu-msft,
Thanks for your response. To answer your question first
Do you mean that you do not know what to fill in client id and client server? No, I've created a connector using clientid and secret from AAD app. I would like to know if a custom connector supports Implicit grant flow authentication as its supported in PowerApps portal? With this authentication pattern, its not required to pass client secret.
Ref: https://docs.microsoft.com/en-us/powerapps/maker/portals/oauth-implicit-grant-flow

Hope I've made it clear.

Was this reply helpful? Yes No
Verified answer

v-yutliu-msft on at

Like (0)

Report

Hi @ashiqf ,

If you use Oauth 2.0 type to fill in authentication, then you need to use client id and client secret.

If you choose other types of authentication, some of them not need client id and client secret.

For example, Basic Authentication. This kind only needs user provide the username and password to create the connection.

If you want this, please create a custom connector configured with an authentication type of Basic Authentication.

Here's a doc about custom connector Authentication types for your reference:

https://docs.microsoft.com/en-us/connectors/custom-connectors/connection-parameters

Best regards,

Was this reply helpful? Yes No