EasyEXP365 and Business Central OAuth Authentication – Delegated Permissions

193 June 28, 2023

1     Overview

Microsoft has made OAuth authentication with Business Central the preferred security method. This article outlines the steps required to setup OAuth delegated authentication and configure the DynamicPoint EasyEXP365 application to leverage this authentication method.

2     App Registration in Azure

  1. Logon to you Azure Portal
  2. Search for “App Registrations”
  3. Select New Registration
  4. Give the registration a logical name, such as “Business Central Web Services for EasyEXP365”
  5. Leave all other options as default and click Register.
  6. Click API permission from the left hand navigation and Add a permission.
  7. Under the Microsoft APIs tab select Dynamics 365 Business Central
  8. Select Delegated Permissions
  9. Check both user_impersonation as well as Financials.ReadWrite.All
  10. Click Add Permissions
  11. Click Grant admin consent and click yes to the dialog message
  12. Click on the left hand navigation to Authentication
  13. Change the Allow public client flows to Yes and save the page
  14. Click back on Overview from the left hand navigation and copy the Application (client) ID. Save it to notepad such that it is available in the next step.

3     EasyEXP365

  1. Logon to the application as an administrator
  2. Click the gear in the upper right corner and select ERP settings
  3. With the Security Settings section, under Credential Type, select Azure AD Delegate
  4. Complete the following fields:
    – Account – Your business central user as an email <example@company.com>
    *Note: This account MUST be a valid Business Central service user that does NOT require Multi-Factor Authentication.
    – Password – The Office 365 password of the user
    – Client ID – With the value copied from the registration
  5. Click test and ensure it is successful
  6. Click save