Oauth Authentication in Logic Apps

Question

How can you authenticate an HTTP Request to Logic Apps using Oauth Authentication mechanism? Any Ideas and pointers are much appreciated.

Answer 1

This is old topic but in case anyone stumbled upon this challenge then the high level answer is

1. Create API management
2. Add VIP (Virtual IP) of API management to Logic App Firewall
3. Add OAuth token policy in API management
4. Add remove Authorization header policy in API management
5. Optionally add extract claim policy expression to pass caller details to Logic App for extra logic

If you are interested I have this in very detail explained on my blog https://marczak.io/posts/2019/08/secure-logic-app-with-api-management/

Answer 2

Request trigger only supports SAS key, you can, however, put the endpoint behind API Management which will allow you to Oauth.

Answer 3

I believe as of now (2020-12-11), you can use Active Directory OAuth to make a call to a Logic App HTTP trigger

I had to add an Azure Active Directory authorization policy with an Issuer claim of https://sts.windows.net/<tenant id>

My test logic app could then make the request using a HTTP action with the authentication type set to "Active Directory OAuth", the authority set to https://login.microsoftonline.com, the audience set to https://management.azure.com and client ID and secret from an App Registration