Portal and Business Central OAuth Authentication – Delegated Permissions

225 June 7, 2023

1     Overview

Microsoft has made OAuth authentication with Business Central the preferred security method. This article outlines the steps required to setup OAuth authentication and configure the DynamicPoint Portal application to leverage this authentication method.

2     App Registration in Azure

  1. Logon to you Azure Portal
  2. Search for “App Registrations”
  3. Select New Registration
  4. Give the registration a logical name, such as “Business Central Web Services for Portal”
  5. Leave all other options as default and click Register.
  6. Click API permission from the left hand navigation and Add a permission.
  7. Under the Microsoft APIs tab select Dynamics 365 Business Central
  8. Select Delegated Permissions
  9. Check both user_impersonation as well as Financials.ReadWrite.All
  10. Click Add Permissions
  11. Click Grant admin consent and click yes to the dialog message
  12. Click on the left hand navigation to Authentication
  13. Change the Allow public client flows to Yes and save the page
  14. Click back on Overview from the left hand navigation and copy the Application (client) ID. Save it to notepad such that it is available in the next step.

3     Customer / Vendor Portal

  1. Logon to the application as an administrator
  2. Click the gear in the upper right corner and select Credentials
  3. Click CREATE
  4. With the Create Credential section, under Credential Type, select Azure AD Delegate
  5. Complete the following fields:
    – Integration User – Your business central user as an email <example@company.com>
    *Note: This account MUST be a valid Business Central service user that does NOT require Multi-Factor Authentication.
    – Password – The Office 365 password of the user
    – Client ID – With the value copied from the registration
  6. Click CREATE to Save New Credential.
  7. Go into your Portal Services to change the credential to your new OAUTH Credential