Office365 connector after MFA enforcement

Hi Paweł Rudy,

If you want to connect your Office 365 account in a Logic App without using interactive login, and you can’t use a Service Principal with mail.read (since it gives access to all mailboxes), the best option is to use a managed identity.

A managed identity is a built-in feature that lets your Logic App securely connect to Azure services (like Office 365) without needing usernames, passwords, or secrets. It’s a secure and hands-off way to handle authentication.

Here are the steps to authenticate the Office 365 connector using a managed identity:

• Enable and set up a managed identity for your Logic App. You can choose between a system-assigned managed identity or a user-assigned managed identity based on your requirements.
• Configure the managed identity to have the necessary permissions to access the Office 365 mailbox connected to your service account.
• Update your Logic App to use the managed identity for authentication with the Office 365 connector.

For your reference, please review the following documentations for further clarification:

• Connect to Office 365 Outlook from Azure Logic Apps
• https://learn.microsoft.com/en-us/answers/questions/317501/recommended-authentication-approach-for-logic-apps

By following these steps, you can authenticate the Office 365 connector in your Logic App without the need for interactive login or using a Service Principal with broad access permissions. This approach provides a secure and seamless way to authenticate your connector.

Hello Shireesha Eeraboina

From what I understand, MI also requires granting mail.read permissions, and additionally, the Outlook365 connector requires authorization through interactive login pop-up.

There is no possibility to authenticate MI/SPN to Outlook365. The only current option is HTTP Request, application permissions mail.read, and changing the logic.