PowerAutomate for Execution 用户中的 Azure JWT

发布于 2025-01-14 22:35:35 字数 266 浏览 2 评论 0原文

我正在设置将从 PowerApp 调用的 PowerAutomate 流程。我想从 Power Automate 中的 Azure AD 获取 JWT 令牌,并使用该令牌对 REST API 调用进行身份验证,将结果返回给 PowerApps。

但是,我希望为执行流程的用户生成 JWT 令牌,并且我不想在流程中对用户凭据进行硬编码。将会有多个用户执行该流程,并且每个用户在我的应用程序(对其进行 REST 调用)中拥有不同的权限,因此我希望对应用程序的身份验证作为指定用户而不是服务帐户/通用帐户来完成

I am setting up a PowerAutomate flow which will be called from a PowerApp. I would like fetch a JWT token from Azure AD in Power Automate and use that token to authenticate call a REST API, return back the result to PowerApps.

However, I would the JWT token be generated for the user which executes the flow and I dont want to hard-code user credentials in the flow. There would be multiple users executing the flow and each user would have different permissions in my App ( to which the REST call is made) so I want the authentication to the app be done as a named user rather than a service account/generic account

如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。

扫码二维码加入Web技术交流群

发布评论

需要 登录 才能够评论, 你可以免费 注册 一个本站的账号。

评论(1

山田美奈子 2025-01-21 22:35:35

感谢 @lona Varga 提出的宝贵建议。将您的建议作为答案发布以帮助其他社区成员。

要以指定用户身份验证您的应用程序,请尝试
以下:

Authentication type: OAuth 2.0
Identity Provider: Azure Active Directory
Client ID: Client ID for Client App Registration
Client Secret: Client Secret for Client App Registration
Resource URL: Client ID fot Backend App Registration.
  • 通过删除现有值并添加这个新创建的值来更新重定向网址,这对于所有连接器都是相同的,它是:
https://global.consent.azure-apim.net/redirect

有关更多详细信息,请 参考以下链接:

已解决:回复:使用 Azure Active Dir 保护自定义连接器... - Power Platform 社区 (microsoft.com)

Thank you @lona Varga for your valuable suggestion. Posting your suggestion as an answer to help other community members.

To authenticate your application as a named user, please try the
following:

  • Create both backend and client application registrations in Azure portal.
  • After configuring these, create a custom connector by updating your security setting as below:
Authentication type: OAuth 2.0
Identity Provider: Azure Active Directory
Client ID: Client ID for Client App Registration
Client Secret: Client Secret for Client App Registration
Resource URL: Client ID fot Backend App Registration.
  • Update the redirect url by removing the existing value and add this newly created one, this is same for all connectors and it is :
https://global.consent.azure-apim.net/redirect

For more in detail, please refer below link:

Solved: Re: custom connector secure using Azure Active Dir... - Power Platform Community (microsoft.com)

~没有更多了~
我们使用 Cookies 和其他技术来定制您的体验包括您的登录状态等。通过阅读我们的 隐私政策 了解更多相关信息。 单击 接受 或继续使用网站,即表示您同意使用 Cookies 和您的相关数据。
原文