Power Platform – Security update to “Http With Microsoft Entra ID (preauthorized)” connector [MC901932]

Message ID: MC901932

We are announcing an update to the “Http With Microsoft Entra ID (preauthorized)” (sometimes called “Webcontents”) connector to enhance security. This change will begin rolling out on October 25, 2024, and will complete worldwide rollout November 15, 2024. As part of this change, a new connection type will be added that uses a first party app with no permissions attached. This is to ensure the best practices are followed by limiting security exposure to only what is required. Coinciding with this change, the name of the connector will be updated to “Http With Microsoft Entra ID”, removing “(preauthorized)” from the name.

How does this affect me?
Existing connections will continue to work. We will follow up at a later date when existing connections need to be migrated to the new connection type.

If the actions recommended below are not taken, new connections made after October 25, 2024, will fail.

What do I need to do to prepare?

  1. Please follow the steps listed at this linked article to add the required permissions to the first part app being used by the connector prior to October 25, 2024.
  2. Perform a test by adding a connection in the “Http With Microsoft Entra ID” (sometimes called WebcontentsV2) connector to make sure everything works fine.

Source: Microsoft

Latest Posts

Share This Update