cancel
Showing results for 
Search instead for 
Did you mean: 

Security - restrict HTTP - Request trigger by IP address, tenant, group, users

I want to secure my flows by restrict IP address, tenant, group, users for HTTP - Request trigger.

 

My scenario:

1. Restrict in my company ipaddress to use my flows which trigger by HTTP - Request.

2. Restrict in my users of our Office 365 group to use my flows which the trigger by HTTP - Request and use from SharePoint - Flow menu.

 

Secure:

Current, Anyone who know HTTP POST URL of the trigger, can use our Flows.

At SharePoint, When create Flow by template 'Complete a custom action for the selected item', the new flow by trigger HTTP - Request, and can use anyone who know HTTP POST URL.

 

Regards,

Yoshihiro Kawabata

 

 

 

 

Status: Under Review

Thank you for the idea, we will evaulate this.

Comments
Level 10

Thank you for your vote to this ideaSecurity - restrict HTTP - Request trigger by IP address, tenant, group, users .

 

Please comments your think, and your scenarios.

Level: Power Up

Hi team,

We also have a similar requirement in which we want to enforce security on the HTTP POST URL to restrict access to this url.

Any ideas would be appreciated.

Thanks

Jyoti

Power Automate Staff
Status changed to: Under Review

Thank you for the idea, we will evaulate this.

Level 10

@Stephen Are there any updates here? It is very difficult to build flows, especially those realted to personal data, without the option of restricting who can make calls to our HTTP endpoints.

Adding this feature would massivly increase the types of flows we can create. Today we are restricted due to this security vunerability.

 

Thanks

Level 10

Yes @Anonymous

 

The Security is a mandatory requirement to use the personal data. 

Level: Power Up

Has there been any update on this item? as security is the key to start using this action actively

Level: Powered On

Almost a year under review?! What's going on here?

@Stephen: When will this continue? Are there any news here?

 

We really need to have a secure solution for using HTTP requests within Flow...