Microsoft Entra ID provides network access management and protects against unauthorized access. To ensure the security of access, configurations are required within Microsoft Entra ID. An app registration is required for this.
|
The Entra application can be set up automatically via the Assisted Setup. In this case, an administrator only needs to grant access in Microsoft Entra ID to activate the connection. The following instructions describe an alternative manual procedure if the automatic setup via the Assisted Setup cannot be used. |
To enable access via the Internet, the collana pay Business Central app must be registered in the Microsoft Entra ID (www.portal.azure.com).
When the app is registered, the following IDs are created, which are important for configuration at a later date:
The URLs for the endpoints can be accessed in the Endpoints menu item.
The next step is to configure the platform.
The copied link is pasted into the marked area and the configuration is performed. The following URL must be entered for authentication:
https://businesscentral.dynamics.com/OAuthLanding.htm
In the following case, OAuth2 authentication is set up. Authentication takes place in the following steps:
- When a specific URL is accessed, a login is required.
- After successful login, the user is redirected to an authorized area, which in this case is Business Central.
Client Secret
The next step is to create a client secret. This is required to access the Business Central app. A value is generated during the creation process, which subsequently needs to be entered in the collana pay Admin Portal (COPAL).
As soon as the client secret has been created, it is visible in the overview. The Expires field contains a date that represents the expiration date. This expiration date cannot be extended. Instead, the client secret must be renewed regularly. When the secret expires, collana pay will no longer be able to deliver messages. In Microsoft systems, it is common for passwords to be changed regularly and there is no way to disable this requirement. You should therefore keep an eye on the expiration date and update your password in COPAL as soon as it has expired.
The Value field contains a generated password. This password is essential to access the Business Central app.
Warning! After the value has been generated, the password must be copied in order to store it in the collana pay Admin Portal. It is no longer possible to copy the password at a later time because it is no longer displayed.
API Permissions
In this step, the API authorization is performed by selecting the access to the Business Central app. This determines which information collana pay is allowed to retrieve by registering in the respective tenant.
It is important to ensure that application permissions are selected when selecting the permission, as communication should only occur through the API and no other access permissions should be granted.
Permission can be granted via Grant admin permission. If the authorization does not work, it is due to the current user's authorization.
The app registration has been successfully configured to access certain facilities. Successful registration is indicated by a green check mark and the notification message has been removed.
Setup Microsoft Entra Application in Business Central
The following setup is required to authorize collana pay to access the Business Central callback web service.
Microsoft Entra Application
1. Navigate to Microsoft Entra applications via the search in Business Central.
2. Click the + New button to create a new Microsoft Entra application.
3. The application client ID created during the app registration is used in the Client ID field.
4. As soon as the client ID has been entered, a description should be entered in the Description field.
5. In the following step, it is necessary to give your consent. The consent must be approved via the Microsoft account.
6. In the next step, confirmation of successful authentication is issued.
7. To ensure successful use, it is necessary to perform the activation in the State field. The state should be changed from Disabled to Enabled.
8. Activation creates a user with which rights can be assigned via the User Permission Sets section.
User Permission Sets
Two authorization sets are available for collana pay:
- collana pay Admin
- collana pay User
To enable access to the resources required for notification delivery in Business Central, the Pay Admin role must be added. Furthermore, the additional role D365 Basic should be assigned to the user. This role is necessary for the user to be able to log in to Business Central.
Related to