When restricting a LOGIC app how cani allow access to my Microsoft PowerPortal to the call back URLS.

Question

We have a LOGIC APP and a POWER PORTAL in POWERAPPS. We are calling the LOGICAPP from the POWERPORTAL using the call back URL of the workflow.

We have restricted access, and used the ALLOW action for all the AZURE service tags, but it is still being blocked ?

We ideally want to restrict public access to the logic app, anyone got any ideas ?

Answer 1

Hi Darren Slade,

Here are some suggestions :

1. Check the URL format: The Logic App HTTP trigger endpoint URL is a SAS URL with a specific format ( https://stackoverflow.com/questions/61362860/how-can-you-obtain-the-full-url-of-a-http-triggered-logic-app-in-the-azure-porta).
2. Review Proxy Settings: If you cannot access a service or specific URLs fail to load, a proxy or firewall might be configured to prevent you from accessing server resources ( https://docs.microsoft.com/en-us/azure/logic-apps/logic-apps-http-endpoint). Review your proxy settings and ensure that you add all the relevant URLs to the allowed list as per your service.

On the other hand about restric public access:

1. Secure Access to the Trigger: You can restrict access to the app, so that only authorized clients can fire the logic app. Every Logic App request endpoint includes a Shared Access Signature (SAS) as part of the URL (https://docs.microsoft.com/en-us/azure/logic-apps/logic-apps-http-endpoint).
2. Use Managed Identity: You can restrict access to the Logic App to only a Managed Identity so that only the App Service can call the Logic App (https://docs.microsoft.com/en-us/azure/app-service/overview-managed-identity?tabs=dotnet).
3. IP Restriction: Logic App allows you to specify IP address + network mask. If you use the /32 network mask, you will be able to add the specific IP addresses you want (https://learn.microsoft.com/en-us/azure/logic-apps/logic-apps-securing-a-logic-app?tabs=azure-portal#restrict-incoming-ip-addresses).

Let me know if this information help you.

Cheers,

Luis

---

If the information helped address your question, please Accept the answer.