how to add managed identity to webhook?

Wosi Man 41

Hi,

I am trying to add managed identity to my actions in the logic apps.
looks like Azure function and Http both provides support support in designer with authentication but for Http WebHook action, I don't see that when authentication is selected.

but from this doc:
https://learn.microsoft.com/en-us/azure/logic-apps/logic-apps-securing-a-logic-app#add-authentication-outbound
Authentication type Supported triggers and actions
Managed identity Azure API Management, Azure App Services, Azure Functions, HTTP, HTTP + Swagger, HTTP Webhook

also trying to add these to http webhook inputs:

but running that webhook failed because of no access

Please let me know how I could enable managed identity with webhook.
btw I am just using System assigned identity with my logic apps.

thank you.

Krish G 2,331 Reputation points

2020-08-14T12:42:42.873+00:00
I see you have missing "identity" property in your screenshot. Did you try that as per doc: https://learn.microsoft.com/en-us/azure/logic-apps/logic-apps-securing-a-logic-app#managed-identity-authentication

"authentication": { "type": "ManagedServiceIdentity", "identity": "SystemAssigned", "audience": "https://management.azure.com/" }
Wosi Man 41 Reputation points

2020-08-14T14:53:53.58+00:00
tried a few things, 2 issues:

For the AzureFunction,
adding this: "identity": "SystemAssigned" will give strange errors like
InvalidTemplate. Unable to process template language expressions for action 'Until_pending_..._finished' at line '1' and column '39934': 'The template language expression 'not(equals(outputs('.....')['statusCode'], 200))' cannot be evaluated because property 'statusCode' cannot be selected. without that, the managed identity works for that Azure Function
Wosi Man 41 Reputation points

2020-08-14T14:54:01.62+00:00
For the Http WebHook
I found adding "authentication" to under Inputs is useless, then I moved it to under "subscribe" and it's being used, however it now gives this error:

WorkflowAuthenticationTypeNotAmongSupportedTypes. The workflow authentication type 'ManagedServiceIdentity' is not supported. The supported types are 'None, Raw, Basic, ClientCertificate, ActiveDirectoryOAuth'.

is managed identity really working with Http WebHook, Is there a working example?
Wosi Man 41 Reputation points

2020-08-19T17:12:41.62+00:00

Any updates?
Pramod Valavala 20,636 Reputation points Microsoft Employee

2020-08-20T04:19:58.013+00:00

@Wosi Man I can confirm the WorkflowAuthenticationTypeNotAmongSupportedTypes error that you've mentioned above. I will reach out to the concerned team internally about this and get back to you.

Accepted answer

Pramod Valavala 20,636 Reputation points Microsoft Employee

2020-08-24T09:28:31.007+00:00

I can confirm that Managed Identity isn't supported for HTTP + Swagger & HTTP Webhook. We have updated the documentation to support this.

Please feel free to raise feature requests to support Managed Identity for these actions.
Please sign in to rate this answer.
Wosi Man 41 Reputation points

2020-08-24T22:08:34.437+00:00

Thank you for confirmation.
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

how to add managed identity to webhook?

0 additional answers

Your answer