在VS Code调试标准逻辑应用连接Service Bus遇托管身份错误

我有一个包含Service Bus主题触发器的工作流，定义如下：

"triggers": {
    "When_messages_are_available_in_a_topic": {
        "type": "ServiceProvider",
        "inputs": {
            "parameters": {
                "topicName": "sbt-intg-procman-dev-inbox",
                "subscriptionName": "sbs-intg-procman-dev-inbox",
                "isSessionsEnabled": false
            },
            "serviceProviderConfiguration": {
                "connectionName": "serviceBus",
                "operationId": "receiveTopicMessages",
                "serviceProviderId": "/serviceProviders/serviceBus"
            }
        },
        "splitOn": "@triggerOutputs()?['body']"
    }
}

我的connections.json文件内容：

{
  "serviceProviderConnections": {
    "serviceBus": {
      "displayName": "svcbus",
      "parameterSetName": "ManagedServiceIdentity",
      "parameterValues": {
        "authProvider": {
          "Type": "ManagedServiceIdentity"
        },
        "fullyQualifiedNamespace": "@appsetting('serviceBus_fullyQualifiedNamespace')"
      },
      "serviceProvider": {
        "id": "/serviceProviders/serviceBus"
      }
    }
  },
  "managedApiConnections": {}
}

local.settings.json的Values中包含：

"serviceBus_fullyQualifiedNamespace": "sb-mynamespace.servicebus.windows.net"

已确认Azure门户中用户在Service Bus上有合适角色分配，且通过VS Code Azure扩展登录了目标订阅，但本地调试时出现错误：

Workflow Error: operationName='WorkflowFunctionDefinitionProvider.ProcessWorkflow', message='Workflow 'NvpOneWay' validation and creation failed. Error: 'The provided connection name 'serviceBus' for type 'ServiceProvider' has invalid 'authProvider' section. Managed identity is either not enabled or misconfigured on the Logic App. Please enable or repair managed identity before use.'', exception='Microsoft.Azure.Workflows.Common.ErrorResponses.ErrorResponseMessageException: The provided connection name 'serviceBus' for type 'ServiceProvider' has invalid 'authProvider' section. Managed identity is either not enabled or misconfigured on the Logic App. Please enable or repair managed identity before use

该逻辑应用在Azure云端运行正常，仅本地VS Code调试时出错，求解决方法？

本地调试Logic App时，云端的托管身份配置无法直接复用，可通过以下方式解决：

方法1：临时切换到连接字符串认证（快速调试） #

修改connections.json中的serviceBus连接配置，改用连接字符串认证：

{
  "serviceProviderConnections": {
    "serviceBus": {
      "displayName": "svcbus-local",
      "parameterSetName": "connectionString",
      "parameterValues": {
        "connectionString": "@appsetting('ServiceBusConnectionString')"
      },
      "serviceProvider": {
        "id": "/serviceProviders/serviceBus"
      }
    }
  },
  "managedApiConnections": {}
}

同时在local.settings.json的Values中添加连接字符串：

"ServiceBusConnectionString": "Endpoint=sb://sb-mynamespace.servicebus.windows.net/;SharedAccessKeyName=RootManageSharedAccessKey;SharedAccessKey=你的共享访问密钥"

注：连接字符串可从Azure门户的Service Bus命名空间「共享访问策略」页面获取。

方法2：使用Azure AD用户身份模拟（推荐） #

本地调试时，Logic Apps运行时会自动使用VS Code登录的Azure AD账号身份，无需配置托管身份，调整连接配置即可：

1. 修改connections.json，将parameterSetName改为AzureADAuth，并移除authProvider相关配置：

{
  "serviceProviderConnections": {
    "serviceBus": {
      "displayName": "svcbus",
      "parameterSetName": "AzureADAuth",
      "parameterValues": {
        "fullyQualifiedNamespace": "@appsetting('serviceBus_fullyQualifiedNamespace')"
      },
      "serviceProvider": {
        "id": "/serviceProviders/serviceBus"
      }
    }
  },
  "managedApiConnections": {}
}

2. 确保VS Code登录的Azure AD账号在Service Bus命名空间上拥有Azure Service Bus Data Receiver（仅接收消息）或对应权限的角色。

方法3：启用本地托管身份支持（复杂场景） #

若必须使用托管身份本地调试，需在本地运行的Logic Apps容器中配置系统分配托管身份，步骤包括Azure AD应用注册、权限映射等，操作繁琐，不推荐用于常规调试场景。

内容的提问来源于stack exchange，提问作者Rob Bowman