Microsoft API Hub: Zendesk OAuth tokens will require expiration and automatic refresh
🚨 The Signal: Microsoft API Hub will enforce expiring OAuth tokens and automatic refresh for Zendesk connections. This enhances security by reducing the lifetime of credentials, requiring reauthorization for existing connections to adopt the new, more secure model.
The Impact
Admins managing Power Platform Zendesk connections face a moderate security risk if existing connections are not reauthorized, potentially leaving long-lived tokens active.
- Power Platform admins: Must reauthorize existing Zendesk connections to mitigate risk of stale, long-lived tokens.
- Developers: Need to ensure their Zendesk-connected flows are updated to handle token reauthorization.
- Security teams: Risk of unauthorized access if old, non-expiring tokens are not remediated.
- Organizations: Potential for service disruption if connections are not updated before old tokens expire.
The Action
- Identify all existing Zendesk connections within Microsoft API Hub and Power Platform environments.
- For each identified connection, initiate a reauthorization process to obtain new expiring tokens.
- Verify that reauthorized connections are actively refreshing tokens automatically.
- Implement a process to regularly review and reauthorize any Zendesk connections unused for 90 days.
Domain: Other · Impact: medium · Workload: Other