Fabric REST API must support service principals more before Azure disables MFA in July 2025
We currently use Azure DevOps pipeline to manage our CI/CD, much like https://learn.microsoft.com/en-us/fabric/cicd/deployment-pipelines/pipeline-automation-fabric .
However, because not all Fabric REST Api's support Service Principal authentication, our CI/CD Pipeline has to use a service user account (with disabled MFA) to authenticate our requests to e.g. trigger a deployment https://learn.microsoft.com/en-us/rest/api/fabric/core/deployment-pipelines/deploy-stage-content?tabs=HTTP .
Unfortunately the next version Azure Connect-AzAccount will no longer support MFA from July 2025 - see Upcoming breaking changes in Azure PowerShell | Microsoft Learn .
The impact of multifactor authentication on Azure PowerShell in automation scenarios | Microsoft Learn is that this change will prevent it's use in automation tasks, and so users need to switch to using either a service principal, managed identity, or a federated identity.
Currently Service Principal authentication is not supported for the key Fabric REST Api calls needed for our CI/CD pipeline, for example deploying to stages, scheduling pipelines, invoking notebooks.
Please advise how we can prevent our automation pipelines breaking later this year?
We would expect service principals to have to be supported at some point in the future for deployment pipeline and for running notebooks and pipelines, but because I haven't been able to find this on e.g. What's new and planned for Fabric Data Engineering in Microsoft Fabric - Microsoft Fabric | Microsoft Learn we now need urgently need clarity on the timescale.
1 Comment
- cube-ian-tRegular VisitorThere's an overlap here with the currently 'Planned' idea: https://community.fabric.microsoft.com/t5/Fabric-Ideas/Fabric-API-Service-Principal-Support/idi-p/4523333 but the time constraint is new!
Recent ideas
Get Secret from Azure Key Vault using Fabric Workspace Identity
Users can access key vault secrets using notebookutils.credentials.getSecret. This is based purely on the user's access (or object owner's access, if the notebook is being run in a pipeline). In larg...sean_cochran5 hours agoResolver INew3.2KViews14likes4CommentsPer-visual Data Freshness Badge with configurable staleness alerts
Problem: Report consumers can’t tell whether the data behind a specific visual is current. Page-level “last refreshed” workarounds ignore that different tables refresh on different schedules, which l...gopinathtk14 hours agoNew MemberNew1View1like0CommentsNative Master Data Management Solution
Microsoft Fabric currently lacks a native Master Data Management (MDM) capability, creating a gap for organizations that need to manage and govern business-critical reference data such as customers, ...bradcoles14 hours agoRegular VisitorNew314Views1like4CommentsAllow Power BI subscriptions to use a no-reply sender instead of the subscription owner's mailbox
Following the migration to the new email delivery platform, subscription emails now appear to come from the subscription owner. This generates large volumes of Out of Office replies, auto-replies, an...tm8215 hours agoNew MemberNew90Views19likes3Comments