Logic App Custom Connector with Windows Authentication

Thomas Kurth 91 Reputation points MVP
2020-08-11T08:23:35.25+00:00

I try to create a custom connector which is using the on-premise data gateway to connect to a REST web service (MEMCM AdminService). The request is correctly sent to the on-premise data connector:

DM.EnterpriseGateway Verbose: 0 : 2020-08-11T07:59:08.0712635Z DM.EnterpriseGateway	b6182789-7097-443c-adfc-fe85091b1197	00000000-0000-0000-0000-000000000000	MGPP	00000000-0000-0000-0000-000000000000	a0ba01d1-058e-44a7-857b-710bdb1f1b74	f7a500cc-478f-4eaf-bb72-671ca7db606b	BB5F1B73 [DM.Pipeline.Common.TracingTelemetryService] Event: FireActivityStartedEvent ()  
DM.EnterpriseGateway Information: 0 : 2020-08-11T07:59:08.0868898Z DM.EnterpriseGateway	b6182789-7097-443c-adfc-fe85091b1197	00000000-0000-0000-0000-000000000000	MGPP	00000000-0000-0000-0000-000000000000	a0ba01d1-058e-44a7-857b-710bdb1f1b74	f7a500cc-478f-4eaf-bb72-671ca7db606b	46EFAADE [DM.GatewayCore] Deserialized GatewayHttpWebRequest, executing  
DM.EnterpriseGateway Information: 0 : 2020-08-11T07:59:08.0868898Z DM.EnterpriseGateway	b6182789-7097-443c-adfc-fe85091b1197	00000000-0000-0000-0000-000000000000	MGPP	00000000-0000-0000-0000-000000000000	a0ba01d1-058e-44a7-857b-710bdb1f1b74	f7a500cc-478f-4eaf-bb72-671ca7db606b	4698049F [DM.GatewayCore] QueryAdditionalInformation is: {"AppName":"AzureConnector"}.  
DM.EnterpriseGateway Verbose: 0 : 2020-08-11T07:59:08.1181385Z DM.EnterpriseGateway	98d4c84a-c843-4ada-b500-0271b2550056	00000000-0000-0000-0000-000000000000	MWPR	00000000-0000-0000-0000-000000000000	a0ba01d1-058e-44a7-857b-710bdb1f1b74	f7a500cc-478f-4eaf-bb72-671ca7db606b	C34CD8F5 [DM.Pipeline.Common.TracingTelemetryService] Event: FireActivityCorrelationEvent (parentActivityId=b6182789-7097-443c-adfc-fe85091b1197)  
DM.EnterpriseGateway Verbose: 0 : 2020-08-11T07:59:08.1181385Z DM.EnterpriseGateway	98d4c84a-c843-4ada-b500-0271b2550056	00000000-0000-0000-0000-000000000000	MWPR	00000000-0000-0000-0000-000000000000	a0ba01d1-058e-44a7-857b-710bdb1f1b74	f7a500cc-478f-4eaf-bb72-671ca7db606b	BB5F1B73 [DM.Pipeline.Common.TracingTelemetryService] Event: FireActivityStartedEvent ()  
DM.EnterpriseGateway Information: 0 : 2020-08-11T07:59:08.1337651Z DM.EnterpriseGateway	98d4c84a-c843-4ada-b500-0271b2550056	00000000-0000-0000-0000-000000000000	MWPR	00000000-0000-0000-0000-000000000000	a0ba01d1-058e-44a7-857b-710bdb1f1b74	f7a500cc-478f-4eaf-bb72-671ca7db606b	D756BA16 [DM.GatewayCore] **Processing https request with URL: https://sccm01.kurcontoso.ch/AdminService/wmi/SMS_R_System**  
DM.EnterpriseGateway Information: 0 : 2020-08-11T07:59:08.1493920Z DM.EnterpriseGateway	98d4c84a-c843-4ada-b500-0271b2550056	00000000-0000-0000-0000-000000000000	MWPR	00000000-0000-0000-0000-000000000000	a0ba01d1-058e-44a7-857b-710bdb1f1b74	f7a500cc-478f-4eaf-bb72-671ca7db606b	DFE1F964 [DM.GatewayCore] **Http(s) request with windows authentication**  

But I get a HTTP 401 error message back. I created a fiddler trace and can see that the request is not really sending an authorization header:

16990-fiddler.png

I configured Kerberos delegation and also granted the On-premise data connector service account permissions on the REST API. If I try by browser it asks for credentials and works then. Is there a known issue in the on prem data connector with Windows Authentication?

Azure Logic Apps
Azure Logic Apps
An Azure service that automates the access and use of data across clouds without writing code.
3,197 questions
{count} votes

1 answer

Sort by: Most helpful
  1. MayankBargali-MSFT 70,526 Reputation points
    2020-08-14T08:56:14.437+00:00

    Hi @ThomasKurth-9742

    Can you please verify if there is any proxy server? If yes then your proxy might require authentication from a domain user account: https://learn.microsoft.com/en-us/data-integration/gateway/service-gateway-tshoot#authentication-to-proxy-server
    If you are still facing the issue I wish to engage with you offline for a closer look and provide quick and specialized assistance, please send an email with the subject line “Attn: Mayank” to AzCommunity[at]Microsoft[dot]com referencing this thread along with the logic app and OPDC details.

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.