Use Key Vault to provide O365 email password for Logic App?

Question

I'm using a logic app to gather some data and then send an email. This works fine if I just manually supply the email address and password. I'd like to store the password as a secret in Key Vault and have Logic Apps look it up instead. I can see that I can retrieve a secret, but I can't see a way to use that in the Send an Email (V2) action or in the Connection itself. If an account password changes today, I assume I would have to go into the API connection and manually click Reauthorize? Is there a way to have it get the password from Key Vault instead?

Answer 1

Hello @Meagan Longoria ,

Once signed in using Office 365 credentials, the connection takes place using the token issued by Microsoft identity platform. This connection will not expire even if you change the sign-in credentials. Please refer to the screenshot below from this document.

You can configure the token lifetime and set the refresh token as well, for more information please refer to Configurable token lifetimes in Microsoft identity platform.
Currently, if the token is revoked a manual sign-in is required to regenerate the token again and we cannot use secret stored in key-vault to sign in.
Please let me know if this resolves the issue faced, if not I will be glad to continue with our discussion.