question

ThomasKurth-mvp avatar image
0 Votes"
ThomasKurth-mvp asked MayankBargali-MSFT edited

Logic App Custom Connector with Windows Authentication

I try to create a custom connector which is using the on-premise data gateway to connect to a REST web service (MEMCM AdminService). The request is correctly sent to the on-premise data connector:

 DM.EnterpriseGateway Verbose: 0 : 2020-08-11T07:59:08.0712635Z DM.EnterpriseGateway    b6182789-7097-443c-adfc-fe85091b1197    00000000-0000-0000-0000-000000000000    MGPP    00000000-0000-0000-0000-000000000000    a0ba01d1-058e-44a7-857b-710bdb1f1b74    f7a500cc-478f-4eaf-bb72-671ca7db606b    BB5F1B73 [DM.Pipeline.Common.TracingTelemetryService] Event: FireActivityStartedEvent ()
 DM.EnterpriseGateway Information: 0 : 2020-08-11T07:59:08.0868898Z DM.EnterpriseGateway    b6182789-7097-443c-adfc-fe85091b1197    00000000-0000-0000-0000-000000000000    MGPP    00000000-0000-0000-0000-000000000000    a0ba01d1-058e-44a7-857b-710bdb1f1b74    f7a500cc-478f-4eaf-bb72-671ca7db606b    46EFAADE [DM.GatewayCore] Deserialized GatewayHttpWebRequest, executing
 DM.EnterpriseGateway Information: 0 : 2020-08-11T07:59:08.0868898Z DM.EnterpriseGateway    b6182789-7097-443c-adfc-fe85091b1197    00000000-0000-0000-0000-000000000000    MGPP    00000000-0000-0000-0000-000000000000    a0ba01d1-058e-44a7-857b-710bdb1f1b74    f7a500cc-478f-4eaf-bb72-671ca7db606b    4698049F [DM.GatewayCore] QueryAdditionalInformation is: {"AppName":"AzureConnector"}.
 DM.EnterpriseGateway Verbose: 0 : 2020-08-11T07:59:08.1181385Z DM.EnterpriseGateway    98d4c84a-c843-4ada-b500-0271b2550056    00000000-0000-0000-0000-000000000000    MWPR    00000000-0000-0000-0000-000000000000    a0ba01d1-058e-44a7-857b-710bdb1f1b74    f7a500cc-478f-4eaf-bb72-671ca7db606b    C34CD8F5 [DM.Pipeline.Common.TracingTelemetryService] Event: FireActivityCorrelationEvent (parentActivityId=b6182789-7097-443c-adfc-fe85091b1197)
 DM.EnterpriseGateway Verbose: 0 : 2020-08-11T07:59:08.1181385Z DM.EnterpriseGateway    98d4c84a-c843-4ada-b500-0271b2550056    00000000-0000-0000-0000-000000000000    MWPR    00000000-0000-0000-0000-000000000000    a0ba01d1-058e-44a7-857b-710bdb1f1b74    f7a500cc-478f-4eaf-bb72-671ca7db606b    BB5F1B73 [DM.Pipeline.Common.TracingTelemetryService] Event: FireActivityStartedEvent ()
 DM.EnterpriseGateway Information: 0 : 2020-08-11T07:59:08.1337651Z DM.EnterpriseGateway    98d4c84a-c843-4ada-b500-0271b2550056    00000000-0000-0000-0000-000000000000    MWPR    00000000-0000-0000-0000-000000000000    a0ba01d1-058e-44a7-857b-710bdb1f1b74    f7a500cc-478f-4eaf-bb72-671ca7db606b    D756BA16 [DM.GatewayCore] **Processing https request with URL: https://sccm01.kurcontoso.ch/AdminService/wmi/SMS_R_System**
 DM.EnterpriseGateway Information: 0 : 2020-08-11T07:59:08.1493920Z DM.EnterpriseGateway    98d4c84a-c843-4ada-b500-0271b2550056    00000000-0000-0000-0000-000000000000    MWPR    00000000-0000-0000-0000-000000000000    a0ba01d1-058e-44a7-857b-710bdb1f1b74    f7a500cc-478f-4eaf-bb72-671ca7db606b    DFE1F964 [DM.GatewayCore] **Http(s) request with windows authentication**

But I get a HTTP 401 error message back. I created a fiddler trace and can see that the request is not really sending an authorization header:

16990-fiddler.png



I configured Kerberos delegation and also granted the On-premise data connector service account permissions on the REST API. If I try by browser it asks for credentials and works then. Is there a known issue in the on prem data connector with Windows Authentication?


azure-logic-apps
fiddler.png (517.7 KiB)
· 2
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hi @ThomasKurth-9742

I am looking into it and will get back to you with an update

0 Votes 0 ·

Hi @ThomasKurth-9742

Want to touch base and see if my answer helps?
Feel free to reach out to me offline if you are still facing the issue.

0 Votes 0 ·

1 Answer

MayankBargali-MSFT avatar image
0 Votes"
MayankBargali-MSFT answered

Hi @ThomasKurth-9742

Can you please verify if there is any proxy server? If yes then your proxy might require authentication from a domain user account: https://docs.microsoft.com/en-us/data-integration/gateway/service-gateway-tshoot#authentication-to-proxy-server
If you are still facing the issue I wish to engage with you offline for a closer look and provide quick and specialized assistance, please send an email with the subject line “Attn: Mayank” to AzCommunity[at]Microsoft[dot]com referencing this thread along with the logic app and OPDC details.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.