Azure Logic app

Question

Hello I created an access package from Entra ID Governance to give access to user on some resources also to create an admin account for the user by triggering a custom extension which is Azure logic apps. Now here is the issue: I created a sample stand alone logic and this work like a charm but when i created the same via ID governance route, the logic does even fire at all but the user still get access to the resource but the admin account wont get create as a result of this.

Can someone help explain to me why the standalone logic work well and while the same logic wont fire from access packages (ID Governance)

Answer 1

Hi ,

 Thanks for reaching out to Microsoft Q&A.

 

The standalone Logic App works because you trigger it directly with your own call and relaxed settings. When called from Entra ID Governance, the Logic App must be HTTP-triggered with the exact schema, supported region, and proper authentication (managed identity or OAuth). If any of these do not match, Entra ID silently skips the custom extension. Access assignment still succeeds because access packages do not fail when extensions fail, so the user gets resource access but the admin account is not created.

Please 'Upvote'(Thumbs-up) and 'Accept' as answer if the reply was helpful. This will be benefitting other community members who face the same issue.