Connector "HTTP with Azure AD" asks credientals for end user

[Anonymous]

Hello everybody!

I have an app where I want to use Flow which gets data from a REST API service secured by Azure AD. Everything worked flawlessly when I set everything up and tested myself. However, when I shared it with a new user, they were met with the following connection screen when launching the app:

Why is the end user asked for credentials to connect to the REST API behind Azure AD? The user is within the Azure AD and I filled in these credentials when adding this connector in edit mode.

Is there a way to make a connection with REST API behind Azure AD that won't ask end user for auth credentials?

Max.

[v-monli-msft]

Hi @Anonymous ,

I have found multiple threads stating this issue:

https://powerusers.microsoft.com/t5/General-Power-Automate/Using-quot-Http-with-Azure-AD-quot-How-to-pre-populate-quot/m-p/246728

https://powerusers.microsoft.com/t5/Building-Power-Apps-Formerly/How-to-bypass-the-prompt-for-Base-Resource-URL-for-PowerApp/td-p/315234

If you want to improve this, please consider to add an idea in PowerApps idea forum here:
https://powerusers.microsoft.com/t5/PowerApps-Ideas/idb-p/PowerAppsIdeas

Regards,

Mona

[Anonymous]

Hi @v-monli-msft,

Thank you for looking into this a bit! Hopefully PowerApps would come eventually to a connector solution that doesn't ask end user technical parameters.

Max.

[RP_NB]

Is there any update on that issue? Has it been resolved yet?

[Anonymous]

Did anyone ever come up with a workaround?

[cornelco]

On the Flow details page in the bottom right there is a section for run only users. In there you can select run only users to use your connection to the HTTP with Azure AD connector. 

In my testing this works to allow users to use the HTTP with Azure AD without them needing to create a new connection which requires entering that information. 

[Powerappy]

Sorry to somewhat Lazarus this thread, but @v-monli-msft & @cornelco do you have any more insight into this connector? I have a solution with 2 canvas apps (user, admin). The user app adds records to a Dataverse table which triggers a flow. The flow needs two HTTP Azure with AD actions which I moved to child flows and set the run only users to a connection reference which uses a service account. So far so good, except that when a user attempts to open the app, they are prompted to provide credentials to create a connection to the HTTP Azure with AD connector, but this connector is not included in the app. Any ideas why? This is impacting the go-live of a solution and I cannot find any reference materials to explain why this might be a problem, given our config. 

[cornelco]

Is the Azure HTTP Connection that you set as the run only users shared with the users that are running the Power App?

Also, is your Flow triggered from the Power App? Or when an item is added to a Dataverse table? 

You could also check the dependencies on your Power App to see if it is dependent on the HTTP with Azure AD connection. 

[yousefhamedi]

if you are using PowerApps action to connect your flow to Power Apps, you will have this problem. When sharing the flow, you won't be able to add "run only" users if using PowerApps action. Make sure to use PowerApps(V2) instead. I spent quite a bit of time on this issue and this information was not available on Power documentation (not a surprise I guess!), so wanted to share and hopefully save time for others!