How to secure a API Logic App preferably without Key Vault or Active Directory

Question

Hi, my team needs to secure an Azure API that connects to a Logic App such that a range of users can access it, but only if they each provide unique access credentials. Is there a simple way to solve this issue that a beginner can understand and implement (including testing) within 1 day? The ideal solution would be to implement it either within the Logic App itself or within API Management, but without using Key Vaults or AD preferably. Please let us know if such a solution can be implemented, or if a Key Vault / AD is a must.

We are currently utilising subscriptions, but that is no longer adequate as we require more than two keys.

Thanks!!!

Answer 1

Hi @Jun Ting Ho

Based on your question i understand that you want to secure the web api without using Azure AD or Keyvault.

You can look at API key based authentication or certificate based authentication. It is easy to implement and same API key or certificate can be used by logic app while calling API irrespective of which user.

I hope this answers your question.

Thanks
Rahul