Handling Extra Backslashes and Quotes in Azure Key Vault Secrets

Applies to Product- Power Automate

What’s happening?
While using the Azure Key Vault Connector in a Power Automate flow, customers are experiencing issues when adding special characters into Azure Key Vault secrets, resulting in extra backslashes () and quotes ("") being included in the stored values.

Reason:
The underlying cause of this is related to how special characters are processed and stored in Azure Key Vault, leading to incorrect formatting of secrets.

Resolution:
To resolve this of extra backslashes and quotes in Azure Key Vault secrets, follow these steps:

1. Use String Manipulation Functions:
2. Utilize functions like replace() or trim() to clean the secret value before storing it in Key Vault.
3. Handle Encoding/Decoding:
4. Consider using the uriComponent() function in Power Automate to encode the string before storing it and decode it when retrieving it.
5. Example: When storing the secret, encode the value as a URI component using uriComponent('yourSecretValue').
6. Test the Retrieved Value:
7. Use a Compose action to output the secret value immediately after retrieval to confirm if the extra backslashes are present due to how Power Automate handles the string.
8. Fix the Secret Format:
9. Ensure that the secret being stored in Key Vault does not contain unintended escape characters or quotes. Manually adjust the secret in Azure Key Vault if necessary.
10. Create a Test Flow:
11. If unsure about the behavior, create a simple test flow to retrieve a secret from Azure Key Vault and output it directly using the Compose action to isolate the issue.
12. Example Flow Structure:
13. Action 1: Get Secret from Azure Key Vault.
14. Action 2: Output the secret using the Compose action.
15. Action 3: Clean the secret if necessary using replace() or trim() functions.