Table of Contents

Setting up Microsoft Entra Authentication

Microsoft Entra is the only authentication method available for establishing web service connections with MS Dynamics 365 Business Central cloud companies. Setting up such a connection requires relevant Microsoft Entra ID and Business Central permissions. It is the IC partner company that needs to be authenticated and authorized to have access to resources exposed by the IC partner company (the IICWebService web service). The following instruction guides through the configuration process.

Important

Microsoft Entra ID used to be called Azure Active Directory (AAD) Learn more

Creating an Application Registration in Microsoft Entra ID

To create an application registration:

  1. Open the Azure Portal and go to the Microsoft Entra ID resource associated with your Azure tenant.

  2. Go to the left-hand side panel and find the App Registrations tab in the Manage section and select the New Registration action.

  3. Fill in the following fields:

  • App Name - Specifies a custom name for the app registration.
  • Supported Account Types - Specifies the account type and the suggested value is Single Tenant.
  • Platform - Specifies the platform to be used. Select the Web option.
  • Redirect URL - It can be left blank as it is not used in the Microsoft Entra client credential authentication flow.

  1. On the Certificates and Secrets tab, select the New Client Secret action, copy the value (note: it is not the Secret ID guid) and store it in a safe place as you will not be able to see it again.

  2. On the API Permissions tab, select the Add a Permission action.

  3. Select Dynamics 365 Business Central from Microsoft APIs and Application Permissions as a required permissions type.

Note

Application Permissions do not require a signed-in user (as opposed to Delegated Permissions).

  1. Choose API.ReadWrite.All and Automation.ReadWrite.All and confirm your choice by choosing the Add Permissions button.

  2. Select the Grant Admin Consent action.

Setting up Microsoft Entra Authentication on a IIC Endpoint Card

To set up Microsoft Entra on the IIC Endpoint card:

  1. Create an IIC endpoint. For details, read Setting up endpoints.

  2. Make sure the Web Service Address field is filled in with a SOAP web service URL.

  3. Fill the Authentication Type field with the Microsoft Entra value.

  4. Fill in the Tenant ID field. It is a GUID value that follows the MS Dynamics 365 Business Central main url https://businesscentral.dynamics.com/**tenant id*/...*. You can also find it on your Overview page.

  5. Fill in the Client ID field with Application (Client) ID which you can find in your Microsoft Entra ID App Registration's overview (Azure Portal).

  6. Fill in the Client Secret field with the client secret you created for your Microsoft Entra ID application registration.

Setting up Microsoft Entra Application

The last step requires setting up an Microsoft Entra Application in an IC partner company. The card represents the application which has just been registered in Microsoft Entra ID. The application needs to have the necessary permissions granted, just like a regular user.

Note

This setup should be done in a receiver company.

  1. Choose the Lightbulb that opens the Tell Me feature icon, enter Microsoft Entra Applications, and then select a related link.

  2. Select the New action and fill in the Client ID field based on the IIC Endpoint.

  3. Assign the following permission sets (or similar):

  • D365 BUS FULL ACCESS
  • D365 BUS PREMIUM
  • ITI03 AIC FULL (ADVANCED INTERCOMPAN - before version 3.1.2)

Testing the Connection

The connection can be tested on a receiver card with the Test Connection action.

See Also

Register Azure application

S2S Authentication