0

I have a logic app that uses the Azure DevOps 'Create a Work Item' action. This connects to ADO as me, but I need it to connect using a service principal.

I'd like to do this in a bicep, but I could do it in the portal if that's required.

I will need to create a Microsoft.Web/connections@2016-06-01 resource, but I don't see a way to provide a service principal.

This article shows how to do it with a a connection to the Azure Monitor Logs, but it doesn't work with the Azure Devops Connection.

That article says to provide the service principal like this:

parameterValueSet: {
      name: 'oauthServicePrincipal'
      values: {
          'token:clientId': {
              value: '<Your Cliente ID>'
          }
          'token:clientSecret': {
              value: '<Your client Secret>'
          }
          'token:TenantId': {
              value: '<Your tenant ID>'
          }
      }
    }

This gives the following error:

'token:clientId' is not allowed on the connection since it was not defined as a connection parameter when the API was registered

How can I use a logic app to create an ADO work item without tying it to an individual person?

3
  • Not sure it is possible: learn.microsoft.com/en-us/connectors/visualstudioteamservices/… Commented Apr 15 at 20:21
  • you could always use http connector to use a service principal or a managed identity Commented Apr 15 at 20:21
  • Seems not possible here. I am afraid you should but I could do it in the portal if that's required. You can deploy the connector in bicep without auth part and then go to the portal, click additional Authorization below connector resource. Commented Apr 16 at 2:14

0

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Start asking to get answers

Find the answer to your question by asking.

Ask question

Explore related questions

See similar questions with these tags.