Recommended authentication approach for Logic Apps Office 365 connector

Question

Recommended authentication approach for Logic Apps Office 365 connector

Ershad Nozari 426

We are using the office 365 connector in Logic Apps to integrate with SharePoint online. At the moment, we are using my personal Microsoft corporate accounts for authentication, which is not ideal. What is the recommended approach for connector authentication in such scenarios, is it possible to use service accounts?

JayaC-MSFT 5,606 Reputation points

2021-03-17T14:11:49.287+00:00

Hello @Ershad Nozari are you trying to use any non-home tenant account ?
Ershad Nozari 426 Reputation points

2021-03-17T20:06:24.66+00:00

Hi @JayaC-MSFT , not sure what you mean by “non-home tenant account”. I’m trying to authenticate against Office 365 for integration with Sharepoint Online. I am wondering what the recommend approach is when authenticating using Connectors, surely it can’t be using personal corporate accounts, specifically as I am a contractor. On-prem we would create service accounts, but I can’t find anything on recommended approach when using Azure Logic Apps.

Accepted answer

1 additional answer

Your answer

JayaC-MSFT 5,606 Reputation points

2021-03-17T14:11:49.287+00:00

Hello @Ershad Nozari are you trying to use any non-home tenant account ?
Ershad Nozari 426 Reputation points

2021-03-17T20:06:24.66+00:00

Hi @JayaC-MSFT , not sure what you mean by “non-home tenant account”. I’m trying to authenticate against Office 365 for integration with Sharepoint Online. I am wondering what the recommend approach is when authenticating using Connectors, surely it can’t be using personal corporate accounts, specifically as I am a contractor. On-prem we would create service accounts, but I can’t find anything on recommended approach when using Azure Logic Apps.

Answer 1

JayaC-MSFT 5,606

Hello @Ershad Nozari yes you are right. You need an Office365 account. However, I mentioned earlier that the logic app and the user account should be in the same domain/organization.
You may refer to https://learn.microsoft.com/en-us/answers/questions/72334/failure-of-office365-api-connection-authentication.html to understand the limitation.

Ershad Nozari 426 Reputation points

2021-03-18T09:00:49.48+00:00

Hi @JayaC-MSFT , I realise that the account and the logic app need to reside in the same domain/organization. I have been searching for a best practice approach on identity and connector auth in logic apps. Not described/straight forward in the docs.

Thanks for response.
JayaC-MSFT 5,606 Reputation points

2021-03-20T09:35:45.95+00:00

Hello @Ershad Nozari , thanks for reaching out. You can submit a documentation feedback on the page "Office 365 connector" for enhancement.

Answer 2

Anonymous

You can use Managed Identities..

Configure a Managed Identity in the Azure Portal
Under the "Identity" -> User Assigned you add the newly created Managed Identity.

That will enable the Logic App to run as a specified "service account" when connecting to other Azure services.

Ershad Nozari 426 Reputation points

2021-03-18T08:23:40.73+00:00

@Anonymous I'm aware that I can use Managed Identities to configure an Azure resource to run under a specific account. My question is around Identities & Authentication when using Connectors:

Reading the following, it seems like we need to create dedicated Office 365 accounts https://learn.microsoft.com/en-us/azure/connectors/connectors-create-api-office365-outlook?fbclid=IwAR3QRcJQ-yn1kAZdHR7NHu8LFF1fm_3GxyXVPe-bbDKwJxaoiVUIYDSlnc0#connect-using-other-accounts

Share via

Recommended authentication approach for Logic Apps Office 365 connector

1 additional answer

Your answer