Keeper launches Microsoft Power Platform secrets connector

Keeper Security has launched a certified Microsoft Power Platform connector for its Secrets Manager on Azure Logic Apps. The connector is also available in Microsoft Power Automate.

The product is aimed at organisations running automated workflows in Microsoft's cloud tools that need to manage credentials without embedding them in scripts or workflow definitions. It lets users retrieve credentials at runtime, create new secrets, rotate passwords and audit vaults from within Azure and Power Automate.

The connector has been published on the Microsoft Power Platform marketplace and is designed to work natively in the Logic App Designer. Standard deployments do not require a custom import.

Hardcoded credentials in automation tools have long been seen as a weak point because they can be exposed in code, workflow files or shared repositories. Keeper aims to address that by letting workflows call secrets when needed rather than storing them directly in the automation layer.

"Workflow automation is only as secure as the secrets powering it, and most organisations are still hardcoding those secrets which creates massive cyber risk," said Darren Guccione, chief executive officer and co-founder, Keeper Security.

"This connector eliminates that exposure by bringing Keeper's zero-knowledge architecture directly into the Microsoft automation layer: secrets stay encrypted in the vault and are retrieved only at the moment they are needed, so there is nothing hardcoded to steal," Guccione said.

How it works

The integration runs through a Python middleware service deployed as an Azure Function App. That service communicates with Keeper Vault through the Keeper Secrets Manager software development kit.

Under Keeper's zero-knowledge model, secrets remain encrypted and are decrypted locally inside the customer's Azure environment rather than passing through Keeper's infrastructure in plain text. The deployment model also places configuration under the customer's own key management arrangements.

"The architecture here reflects a principle Keeper holds across the entire platform," said Craig Lurey, chief technology officer and co-founder, Keeper Security.

"Secrets should be decrypted as close to the workload as possible and only when needed. The Azure Function middleware gives customers a deployment model where the Keeper SDK runs inside their own Azure environment, their own key management handles the configuration and plaintext credentials are never in motion across a network boundary they do not control," Lurey said.

Five operations

The connector supports five operations: List Secrets, Get Secret, Create Secret, Update Secret and List Folders. These functions are intended to support tasks including API credential injection, database connection string retrieval, GitHub secret synchronisation and vault compliance auditing.

It also includes dynamic dropdown menus that populate secret and folder selections in the Logic App Designer, a feature intended to reduce configuration errors during setup.

For deployment, customers can use an Azure Resource Manager template to provision the required infrastructure, including the Azure Function App, Key Vault and Managed Identity. Keeper described the process as a one-click setup.

The launch reflects broader demand for tools that fit established cloud automation environments, particularly as software teams and IT departments expand low-code and no-code workflow use. In Asia-Pacific markets outside China, Microsoft Azure and Power Automate are widely used for cloud migration and workflow automation, with strong small and medium business adoption in Southeast Asia and broader use in financial services and healthcare in Australia and New Zealand.

Keeper, which focuses on identity security, password management, privileged access management and secrets management, is positioning the connector as part of a broader effort to tie security controls more closely to day-to-day cloud operations. The Azure Logic Apps integration is available now.