web
You’re offline. This is a read only version of the page.
close
Skip to main content

Announcements

News and Announcements icon
Community site session details

Community site session details

Session Id :
Power Platform Community / Forums / Power Automate / How to authenticate PO...
Power Automate
Answered

How to authenticate POST requests for a custom connector's webhook trigger?

(0) ShareShare
ReportReport
Posted on by 20

Hi all, I'm setting up a custom Power Automate connector to use Webhook Triggers with a webapp I control. My use case is roughly the same as the "Create Webhook Trigger" tutorial:

  1. When the trigger is instantiated and saved in a Power Automate flow, it should generate a webhook URL and register it with my app.
  2. When qualifying events happen within my app, it should send a request to the webhook URL.
  3. When Power Automate receives a request to the webhook URL, it should trigger the flow.

I've configured my connector so that steps 1 and 2 are working:

  1. Power Automate is successfully generating a webhook URL (https://prod-41.westus.logic.azure.com/workflows/...) and sending it to my app's registration endpoint.
  2. My app is sending POST requests to the webhook URL, with a body matching the configured body format.

However, my app is always receiving a 401 response for these requests:

{
 "error": {
 "code": "DirectApiAuthorizationRequired",
 "message": "The request must be authenticated only by Shared Access scheme."
 }
}

 

I've also tried this with Postman and have been getting the same response. I haven't been able to find any description of requirements for request format beyond the destination URL and payload format. The tutorial only addresses authentication for the webhook registration API (ie, step 1)—not authentication for making the webhook request (step 3)—and I haven't found any mention of webhook authN or authZ elsewhere in the custom connector documentation or troubleshooting page.

 

Is there some way to authenticate webhook URL requests such that Power Automate will accept them?

Categories:
I have the same question (0)
  • Verified answer
    mprice-fluxx Profile Picture
    20 on at

    It turned out that the problem was on my end. Each webhook URL includes a &sig=... URL param that's used for authentication. However, my app was storing the URLs as VARCHAR(255) and silently truncating any part past 255 characters—which included the sig param.

     

    Updating my app to store the webhook URLs as a longer TEXT field instead fixed the problem.

Under review

Thank you for your reply! To ensure a great experience for everyone, your content is awaiting approval by our Community Managers. Please check back later.

Helpful resources

Quick Links

Season of Sharing Community Challenge Launch!

Jump in, show your community spirit, and win prizes!

Kudos to our 2025 Community Spotlight Honorees

Expanding mentorship, skilling, and AI innovation

Congratulations to the May Top 10 Community Leaders!

These are the community rock stars!

Leaderboard > Power Automate

#1
Valantis Profile Picture

Valantis 411

#2
David_MA Profile Picture

David_MA 300 Super User 2026 Season 1

#3
Vish WR Profile Picture

Vish WR 291

Last 30 days Overall leaderboard