Forum Discussion

YashMoroliya's avatar
YashMoroliya
Regular Visitor
2 months ago
Solved

Is Microsoft Entra authentication mandatory for Fabric GraphQL APIs?

Hi Team, I have created a GraphQL API in Microsoft Fabric and I am trying to consume it from an external application (Salesforce/Postman). Currently, I have only the GraphQL endpoint URL. When I tr...
API for GraphQL
lakehouse
  • Parchitect's avatar
    Parchitect
    2 months ago
    Yes — Microsoft Entra authentication is required for Fabric GraphQL APIs.

     

    The endpoint is not publicly accessible, so having the URL alone is not enough. All requests must be authenticated using an access token (typically via Entra ID / OAuth).

     

    Workspace permissions don’t replace this — they are only evaluated after authentication, not instead of it.

     

    That’s why you’re getting a 401 Unauthorized response: the request doesn’t include a valid token.

     

    So to call the API from Postman or Salesforce, you’ll need to:
    - register an app in Microsoft Entra ID
    - obtain an access token (client credentials or delegated flow)
    - include the token in the Authorization header

     

    There isn’t currently a way to call Fabric GraphQL APIs using only workspace permissions without Entra authentication.

    If you have any further questions regarding this matter, please ask them.
     
    Best regards
    Solutions Architect · Microsoft Fabric Specialist - Parchitect

    💡Did my response help you? Clicking Kudos is a small gesture that goes a long way, it encourages contributors and helps the community thrive!
    ✔️Did I answer your question? Please mark my post as a Solution, it helps others find the answer faster.