How to connect to azure blob container from BizTalk using only SAS-Token

Question

Hello,

I was provided with SAS-Token to azure storage blob container, I'm now rying to connect to that container from BizTalk in order to send files. I'm getting error message that says "Public access is not permitted on this storage accout", how am I supposed to fix this issue?

Thanks in advance.

Answer 1

Hi @Natalia Gawrychowska ,

You need to add a public IP to network access list on storage account .

More information about network configuration on storage account:

https://learn.microsoft.com/en-us/azure/storage/common/storage-network-security?tabs=azure-portal

Let me know if its's working for you.

Cheers,

Luis Arias

---

If the information helped address your question, please Accept the answer.

Answer 2

Hello Natalia Gawrychowska,

Thank you for posting your query here!

I understand you are getting the error message "Public access is not permitted on this storage account" when trying to connect to an Azure Storage Blob container from BizTalk using a SAS token.

This indicates that the storage account has been configured to disallow public access, which is a good security practice.

Since your Blob Storage is configured to be private, you typically cannot configure the firewall and virtual networks to allow access from all networks. In private storage, access to the storage account is restricted by default, and you need to explicitly specify which networks or IP addresses are allowed.

Refer to page for more details about how to make these settings: https://docs.microsoft.com/en-us/azure/storage/common/storage-network-security?tabs=azure-portal

Also, please confirm that the SAS token you are using has not expired and has the necessary permissions for the operations you are trying to perform (e.g., write permissions for sending files).

Kindly let us know if you have any further queries. I’m happy to assist you further.

---

Please do not forget to "Accept the answer” and “up-vote” wherever the information provided helps you, this can be beneficial to other community members.

Answer 3

Hi,

I do add IP address when I create SAS Token, I also allow public access from all networks. I can try do it like you show on the picture but since I allow public access from all networks I shoud not be getting error "public access is not permitted", or am I wrong?