Automating your CI\/CD pipeline for Power Platform solutions streamlines development and reduces manual tasks. Integrating GitHub Actions with federated authentication provides secure and scalable access for creating environments, importing solutions, and even cleaning up temporary environments. This post guides you through automating these tasks with a federated authentication setup.<\/p>\n
This guide details how to automate Power Platform environment creation and solution import using GitHub Actions with federated authentication. Federated authentication removes the need for direct application credentials by leveraging single sign-on (SSO) capabilities with identity providers. This approach ensures that deployments are secure, compliant, and less reliant on sensitive credentials.<\/p>\n
Ensure you have the following:<\/p>\n
Using federated authentication in GitHub Actions involves configuring an OpenID Connect (OIDC) trust relationship between GitHub and your identity provider (e.g., Azure AD). This setup ensures secure, token-based authentication without storing client secrets.<\/p>\n
Create an App Registration<\/strong> in Azure AD:<\/p>\n Enable Federated Credentials<\/strong> for the app registration:<\/p>\n Assign Required API Permissions<\/strong>:<\/p>\n To enable federated authentication, you will only need:<\/p>\n No client secrets are needed because authentication is handled by OIDC and federated credentials.<\/p>\n The following GitHub Actions workflow automates environment creation and solution import with federated authentication:<\/p>\n To test:<\/p>\n Implementing federated authentication with GitHub Actions for Power Platform enhances security by avoiding client secrets and using OIDC. This setup automates CI\/CD tasks efficiently and keeps your Power Platform tenant clean.<\/p>\n Automate Power Platform Environment Creation & Solution Imports with GitHub Actions (Federated Auth Setup) Automating your CI\/CD pipeline for Power Platform solutions streamlines development and reduces manual tasks. Integrating GitHub Actions with federated authentication provides secure and scalable access for creating environments, importing solutions, and even cleaning up temporary environments. This post guides you through […]<\/p>\n","protected":false},"author":173795,"featured_media":1247,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[1],"tags":[],"class_list":["post-1246","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-powerplatform"],"acf":[],"blog_post_summary":" Automate Power Platform Environment Creation & Solution Imports with GitHub Actions (Federated Auth Setup) Automating your CI\/CD pipeline for Power Platform solutions streamlines development and reduces manual tasks. Integrating GitHub Actions with federated authentication provides secure and scalable access for creating environments, importing solutions, and even cleaning up temporary environments. This post guides you through […]<\/p>\n","_links":{"self":[{"href":"https:\/\/devblogs.microsoft.com\/powerplatform\/wp-json\/wp\/v2\/posts\/1246","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/devblogs.microsoft.com\/powerplatform\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/devblogs.microsoft.com\/powerplatform\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/powerplatform\/wp-json\/wp\/v2\/users\/173795"}],"replies":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/powerplatform\/wp-json\/wp\/v2\/comments?post=1246"}],"version-history":[{"count":0,"href":"https:\/\/devblogs.microsoft.com\/powerplatform\/wp-json\/wp\/v2\/posts\/1246\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/powerplatform\/wp-json\/wp\/v2\/media\/1247"}],"wp:attachment":[{"href":"https:\/\/devblogs.microsoft.com\/powerplatform\/wp-json\/wp\/v2\/media?parent=1246"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/powerplatform\/wp-json\/wp\/v2\/categories?post=1246"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/powerplatform\/wp-json\/wp\/v2\/tags?post=1246"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}\n
https:\/\/github.com\/<organization>\/<repository><\/code>.<\/li>\n<\/ul>\n<\/li>\n\n
\n
Environment.Create<\/code>, Solution.Import<\/code>) to the app registration in Azure AD.<\/li>\n<\/ul>\n<\/li>\n<\/ol>\nGitHub Secrets<\/h2>\n
\n
GitHub Actions Workflow<\/h2>\n
name: Power Platform CI\/CD with Federated Auth\n\non:\n push:\n branches:\n - main\n\njobs:\n deploy:\n runs-on: ubuntu-latest\n steps:\n - name: Checkout Code\n uses: actions\/checkout@v3\n\n - name: Set Environment Name\n run: echo \"ENV_NAME=${{ github.ref_name }}-${{ github.run_id }}\" >> $GITHUB_ENV\n\n - name: Authenticate with Azure via Federated Auth\n uses: azure\/login@v1\n with:\n client-id: ${{ secrets.AZURE_CLIENT_ID }}\n tenant-id: ${{ secrets.AZURE_TENANT_ID }}\n federated-credentials: true\n\n - name: Create Power Platform Environment\n run: pac environment create --name $ENV_NAME --region unitedstates --type Production\n\n - name: Import Solution to Power Platform\n run: pac solution import --path .\/solution.zip --environment $ENV_NAME\n\n - name: Cleanup Power Platform Environment on Failure\n if: failure()\n run: pac environment delete --name $ENV_NAME\n<\/code><\/pre>\nWorkflow Breakdown<\/h3>\n
\n
Verifying the Workflow<\/h3>\n
\n
Conclusion<\/h3>\n
\nAdditional Links<\/h3>\n
\n