Forum Discussion

curiousan's avatar
curiousan
Microsoft Employee
4 months ago

Support for Azure Key Vault Access using Fabric Workspace Managed Identity

We have a use case where we need to access secrets in Azure Key Vault (located behind a firewall) from a Fabric Notebook. We successfully created a managed private endpoint from Fabric to Key Vault f...
capacities
security
workspaces
curiousan's avatar
curiousan
Microsoft Employee
4 months ago

Hi v-kpoloju-msft  thanks for the update,

we have organization wide policy that do not allow usages of secret/key/certificate for Entra app. Can i have some workaround without using Entra ID + Secret based authentication? 

 

  • v-kpoloju-msft's avatar
    v-kpoloju-msft
    Community Support
    4 months ago

    Hi curiousan,

    Thanks for the clarification that makes sense given your organizations policy.

    Currently, Microsoft Fabric does not support accessing Azure Key Vault in pipeline or scheduled runs using workspace managed identity or any fully secret-less authentication. So avoiding both client secrets and certificates while still enabling automated access isn’t achievable natively at this time.

    If your policy allows, you could consider certificate based authentication with a Service Principal as a more secure alternative to secrets. Otherwise, options are limited to user-based (interactive) runs or handling Key Vault access externally (e.g., via Azure services with Managed Identity) and passing values into Fabric. At present, there is no fully supported workaround within Fabric that satisfies all these constraints together.