Question

You are building a custom connector that calls an Azure Function protected by Microsoft Entra ID. The connector must let makers sign in with their own credentials so the Function receives an access token that identifies the calling user. In the custom connector's security configuration, which authentication type and setting must you configure to obtain a user-delegated token for the Function's app registration?

Accepted Answer

OAuth 2.0 with Microsoft Entra ID as the identity provider, specifying the Function app registration's Application ID URI as the Resource URL (audience)

Answer

API Key authentication, passing the Entra ID client secret in a custom header on every request

Answer

Basic authentication using the maker's Entra ID username and password stored in the connection

Answer

No authentication, relying on the Function's built-in Easy Auth to silently inject the user identity