Secure HTTP Request in Power Automate by IP Address

This video demonstrates how to restrict the trigger "When a HTTP Request is received" to trusted IP Addresses. By default anyone with the flow URL can execute the flow.

Let me know your thoughts in the comments and if you have tried this out. You can grab the sample expressions from the blog post here:

[renosun]

This is extremely helpful Paul!!! Love it! Do you have a video to show also how to use "authentication" method with 3rd party software/system to do HTTP request securely with Power Automate?

[stevenvits]

Thank you!
Can you please deprive into the 2 other authentication options, or is that not possible when using this trigger as a web server?

[moto-x]

Paul,

Thanks so much for this video! I appreciate it. I was wondering if you had any plans to look into the users in my tenant auth method. I know it's possible to set up with a client secret / ID in azure and post/get calls via postman, etc.

However, I'm trying to figure out a secure way for users in my tenant to do this via a hosted web page like you've done here. I'm not quite to how to be able to do that from a user clicking a link and not actually passing those variables via a manual call.

Any thoughts / ideas would be welcomed!