The HTTP POST URL of the ‘When an HTTP request is received’ trigger in Power Automate Flows is a public endpoint, so you need to secure it.
There are several options to secure the receiving Flow for Actionable Messages requests:
- Enable Schema validation in the settings of the trigger
- Add Trigger conditions based on Headers keys
- Compare correlationId from Headers with the original one
The…
Continue Reading StefanS365’s Article on their blog
Secure the receiving Flow for Actionable Messages requests – There’s Something About Dynamics 365
UPDATED (2019-11-29)I’ve updated the expressions formula to get the keys from the bearer token. Since that string is variable of
Blog Syndicated with StefanS365’s Permission