Sharepoint Lists Integration with Azure Key Vault for Password Authentication?

Anmol Ganju 176 Reputation points
2022-12-13T05:49:56.743+00:00

Hi I have a logic app where I am using Sharepoint lists for moving the data from an Azure SQL Databases, currently am using Sharepoint online direct account credentials to connect to sharepoint online, but once this is moved to production I want to eliminate the use of username and password directly, and it can be featched from something like Azure Key Vault or Azure Active directory application maybe, is there any secure way to get this to work or using username and credentials is the only option here?

Azure Logic Apps
Azure Logic Apps
An Azure service that automates the access and use of data across clouds without writing code.
3,456 questions
SharePoint
SharePoint
A group of Microsoft Products and technologies used for sharing and managing content, knowledge, and applications.
11,230 questions
{count} votes

1 answer

Sort by: Most helpful
  1. MayankBargali-MSFT 70,896 Reputation points
    2022-12-16T08:38:11.367+00:00

    @Anmol Ganju Thanks for reaching out.

    At the moment, the sharepoint authorization works with the OAuth 2.0 Authorization Code Grant Type, which means, you can only get the authorization code by getting the user sign in to get the code. This behavior of the API is by design. Thus, there is no way to fully automate this and you need to use username and password for the sharepoint connector authentication.

    • Consider not re-creating api connection after initial manual authentication since there's no need unless cred changes, and only include logic apps in arm template for subsquent deployment.
    • Consider using HTTP with MSI to call graph API directly.

    For connection resource define you can refer to this.
    More details : https://learn.microsoft.com/en-us/azure/logic-apps/logic-apps-deploy-azure-resource-manager-templates#authorize-oauth-connections

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.