How to disable SAS authorization for Logic App?

Question

Is there a way to disable the SAS authorization scheme for a Logic App HTTP-trigger?

In the documentation I read the following:
"Inbound calls to a request endpoint can use only one authorization scheme, either SAS or Azure Active Directory Open Authentication. Although using one scheme doesn't disable the other scheme..." - Source: https://learn.microsoft.com/en-us/azure/logic-apps/logic-apps-securing-a-logic-app

What I'm trying to do:
I would like to disable the SAS authorization scheme. The logic app should not be triggered when the correct SAS parameter is provided. Or if triggering the logic app can't be avoided, than it should return an error. Only OAuth authorization should give a valid result. Is this possible?

Answer 1

You have configured Azure Active Directory Open Authentication (Azure AD OAuth) to trigger the Logic App. You would now would like disable the trigger of Logic App through the SAS method.

Inbound calls to a request endpoint can use only one authorization scheme, either SAS or Azure Active Directory Open Authentication. Unfortunately, using one scheme doesn't disable the other scheme.

Having said that, you could share your product feature feedback here at : https://feedback.azure.com/

Answer 2

Actually you can now do this - I found the answer on this blog post and tested it works:

https://www.richardawilson.com/2025/08/locking-down-logic-app-consumption-with.html

It’s also documented here but I found the blog first:

https://learn.microsoft.com/en-us/azure/logic-apps/logic-apps-securing-a-logic-app?tabs=azure-portal&ref=hybridbrothers.com#disable-shared-access-signature-sas-authentication-consumption-only