Forum Discussion

TePe's avatar
TePe
Helper IV
1 month ago
Solved

Fabric Pipelines & Key Vault

Hi...   I might have missed something but I'm just trying to retrieve a custom key in a Fabric Pipeline for a web authentication from KeyVault. I know that Credentials can be derived from KeyVault,...
data engineering
  • TePe's avatar
    TePe
    1 month ago

    Hi,

    thanks for the feedbacks! I got an information from Microsoft that the integration of KeyVault with Workpace Identities is still to be done and won't be there very soon. So luckily I got the permission to access KeyVault with a Service Principal. Will dig into that deeper, but that should be well supported now.

    Thanks everyone!

     

    Thomas

Prince0011's avatar
Prince0011
Solution Sage
1 month ago

This is a solid breakdown of the Workspace Identity approach, and honestly the cleanest fix for this exact circular dependency problem.

One thing worth flagging for anyone reading this later: Workspace Identity support isn't uniform across every activity type yet, so if the Web Activity itself doesn't support pulling from Key Vault directly via Workspace Identity in your scenario, a common workaround is to add a preceding activity (like a notebook or a separate lookup) that retrieves the secret first, then pass that value into the Web Activity dynamically. Worth checking the docs for the specific activity you're using before assuming it's wired in end to end.

Also seconding the Entra ID check — I've seen cases where Workspace Identity shows as "enabled" in the workspace settings but the actual identity object took a few minutes to propagate to Entra, so permissions assigned too early in Key Vault didn't take effect until a retry.