Cloud External Applications and Power Automate

[Oana_Georgiana_Vasile]

Do you know from where should I get the redirect URL for a Power Automate App which is calling a UiPath process? How can I configure it now in the External Applications?

[AndyMenon]

Did you check this MSFT post?

https://support.microsoft.com/en-us/topic/verifying-oauth-configuration-for-custom-connectors-d733fdb9-6108-4199-b4f5-06e99b02d10f

Update:

Sorry, I could not complete my thought process. Basically that page above shows how to first fetch a Client ID and Client Secret using the Postman client because Postman has an established callback URL as shown in that article above.
You may also want to see if Power Platform has a URL like that. Usually, clients can build and deploy a Web app to use as a redirect Urls to capture the call back from UiPath and extract the Access token.

Here is what I think you can do using Postman:

Register a Confidential application on you UiPath Tenant (add the scopes necessary) and plug in the Postman call back URL:

Once you save your App settings, you will be presented with an App Id and App Secret.

You will need these to place your first OAuth 2 request from Postman. The UiPath documentation for this can be found here.

Once you get the first Access token you can follow that UiPath documentation to use the access token to get the refresh token.

When have the refresh token, you can use it in your Power Automate App to repeatedly get new access tokens and replace the existing refresh token with a new one.

Because you asked about Redirect URLs, I am linking you to a video series I had made on Data Service APIs with OAuth. That series shows how to fetch Access tokens for Non-confidential applications using the PKCE protocol.

I think you will find the Part 1 and 2 videos helpful in case you are going to be working with Non-Confidential applications that will maintain a sustained connection with the UiPath API endpoint.

Thanks,
Andy

[Oana_Georgiana_Vasile]

Thank you very much, I will give it a try. Since my Power Automate App was connecting to the UiPath API to start a UiPath Job, now it means that I’ll have to make sure that the Power Automate App runs at least once in 60 days to refresh the token. That is a big disadvantage

[AndyMenon]

Not necessarily. You can have an alternate service to post a refresh token that your PA job can use when it runs . For example if your job runs once every 50 days, your service can run 20 days before it. That way your main App doesnt have to deal with the logic of looking for token expiration and fetching a new one.

Andy Menon
Founder, Lead RPA Architect & Engineer
www.rpavanguard.com | admin@rpavanguard.com |
UiPath MVP 2021/22

[codemonkee (Tim)]

You can create a custom Data Connector in Power Automate and the Redirect URL is revealed after you have saved the connector.

You can then take the Redirect URL and add it to the External Application reference in UiPath.

Then moving onto Step 5 of the Custom Connector, you can Test the Connection.

It’s a bit more involved, but allow you to create specific Actions that you want to support and Trigger events.

^^ I’ve only looked at it from a Confidential / User scope

@AndyMenon - I just took a quick view of your first video, and enjoyed the level of detail you go into. One comment specific to Postman is you created a new Request specifically for getting your authenticating OAuth and getting your token. You can place the authentication at the Collection or Folder level and have your individual requests ‘inherit auth from parent’. This will save you from having to maintain any dynamic references and handling the refresh sequence as Postman will does this automatically.

[AndyMenon]

@codemonkee

You can place the authentication at the Collection or Folder level and have your individual requests ‘inherit auth from parent’.

Hello @codemonkee ,

Thanks for taking the time to watch the video .
You are correct, a separate request isn’t needed. But at the time i made that video, the idea was to keep it simple and yet the video as you rightly described turned out to be detailed.

Also, i do not script my videos and therefore did not have a specific project-like approach to organize it in postman the way you have described.

This is really great feedback

So thanks again!
Andy

[AndyMenon]

@codemonkee

It’s a bit more involved

I agree. I really like the ZOHO API approach where they have the concept of “self token” for unattended process and those that do not have call back URLs.

The process is relatively easy to fill in the scope & generate the first token.