New trigger authentication options break this process in Power Automate

[joshtransient]

Since the introduction of the Who can trigger the flow? option in the "When a HTTP request is received" trigger, the site script action to trigger a flow now fails every time.

When "Anyone" is chosen, the error message is "The request must be authenticated only by Shared Access scheme." When "Any user in my tenant" is chosen, the error message is "The OAuth authorization scheme is required. Please add authentication scheme and try again."

This is only broken when using Power Automate. The HTTP request trigger in Logic Apps does not have the Who can trigger the flow? option (yet), and still works just fine.

---

Document Details

⚠ Do not edit this section. It is required for learn.microsoft.com ➟ GitHub issue linking.

• ID: 1afac891-6cf5-1746-6392-8cb61a441770
• Version Independent ID: b5d1f95b-f40b-8d0c-7334-7608a3add9ff
• Content: Using site designs and Power Automate to track site creation requests
• Content Source: docs/declarative-customization/site-design-trigger-flow-tutorial.md
• Service: sharepoint-online
• GitHub Login: @VesaJuvonen
• Microsoft Alias: vesaj

[ghost]

Thank you for reporting this issue. We will be triaging your incoming issue as soon as possible.

[joshtransient]

Update: the functionality is not expressly broken. However... 1) When selecting the When a HTTP request is received trigger in the Power Automate designer, the default value of Who can trigger the flow is "Any user in my tenant" 2) When the value of Who can trigger the flow is changed to "Anyone", the HTTP POST URL value in the trigger is updated. Since that field shows as a single line of text in the Power Automate designer, I wasn't aware that additional query parameters were added.

Ensuring that I have the correct HTTP POST URL in my site script with the additional query params makes this work. However, I'd still highly recommend that this doc be updated with a note to tell folks to change the Who can trigger the flow value first, then copy the HTTP POST URL value.