Thanks for reaching out in Microsoft Community Forum
Key Vault integration with Fabric data factory is not available but within pipelines you can use webactivity and key vault REST API to get secret values
To retrieve secret values from Azure Key Vault within a Fabric Data Factory pipeline using Web Activity and Key Vault REST API, follow these steps:
Step 1: Grant Permissions to Access Key Vault
Go to the Azure portal and navigate to your Azure Key Vault.
Assign appropriate permissions
step 2; If using Managed Identity, ensure the Fabric Data Factory's Managed Identity has Get access on secrets.
If using Service Principal, grant similar permissions to the Service Principal.
step 3; Obtain the Key Vault REST API URL
The base URL for Key Vault REST API is: https://<YourKeyVaultName>.vault.azure.net/
To access a specific secret, append the secret name: https://<YourKeyVaultName>.vault.azure.net/secrets/<SecretName>?api-version=7.3
step 4; Configure Web Activity in Fabric Data Factory
URL: Enter the Key Vault secret URL (https://<YourKeyVaultName>.vault.azure.net/secrets/<SecretName>?api-version=7.3).
Method: Set to GET.
Authentication:
For Managed Identity:
Select the Managed Identity option.
Ensure the Managed Identity has access to the Key Vault.
For Service Principal:
Obtain an Access Token from Azure AD and pass it in the Authorization header.
Add a header with the following key-value pair: Authorization: Bearer <AccessToken>
Step 5: Get an Access Token (If Using Service Principal)
Add a separate Web Activity to retrieve an Azure AD token using the OAuth 2.0 token endpoint:
Method: POST
Body:
{
"grant_type": "client_credentials",
"client_id": "<ServicePrincipalClientID>",
"client_secret": "<ServicePrincipalSecret>",
}
Headers:
Content-Type: application/x-www-form-urlencoded
5.Capture the token response in the output of this activity.
6. Link Access Token to Key Vault Web Activity
In the Key Vault Web Activity, use the output of the token retrieval activity for the Authorization header:
Use dynamic content to reference the token: @concat('Bearer ', activity('GetTokenActivityName').output.access_token)
7. Use Retrieved Secret Value
The Key Vault API returns the secret value in the value property of the JSON response.
Pass this output dynamically to subsequent pipeline activities: @activity('GetSecretActivityName').output.value
If you found this post helpful, please consider marking it as "Accept as Solution" to help other members find it more easily.
Thanks,
Pavan.
