Registering Dynamics 365 Business Central Application in Azure

Before using the integration it is necessary to configure credentials that will be used for accessing API of the Dynamics 365 Business Central instance. To configure the credentials, follow the instructions below.

Register an Azure AD application for authentication to Business Central

1. Sign in to the Azure portal.

2. Register an application for Business Central in your Azure Active Directory tenant.

3. After you register the application, specify the following information:

   • Name. A unique name for your application

   • Supported account types. Select Accounts in this organizational directory only (Microsoft only - Single tenant)

   • Request URI. Specify https://businesscentral.dynamics.com/OAuthLanding.htm

   

4. After that, an overview of your application will be displayed:

    

   

   The following information from this page will be required to set up the integration:

   Application (client) . This is the application ID that will be used as the user name.

   Directory (tenant) ID. This is the ID of the  Azure Active Directory used by Business Central in Azure AD. It can be the tenant's domain name or a GUID.

5. Create a client secret for the registered application.

   1. Select Certificates & secrets > New client secret.

   2. Add a description, select a duration, and click Add.

   

   Make sure to copy and save the secret as it will not be displayed ever again. It will be used as a password in the integration.

6. Grant the registered application the API.ReadWrite.All permission to the Dynamics 365 Business Central.

   1. Select API permissions > Add a permission > Microsoft APIs.

   2. Select Dynamics 365 Business Central.

   3. Select Application permissions, select API.ReadWrite.All, then select Add permissions.

      

   4. Grant admin consent for that permission by selecting it in the list and then choosing Grant admin consent for <tenant name>.

      

This concludes registration of the Azure AD application.

Configure service-to-service authentication for the Azure AD application in Business Central

1. In the Business Central client, search for Azure Active Directory Applications and open the page.

2. Click New.

3. In the opened screen, enter the Application (Client) ID to the Client ID field. This is the Azure AD application ID that you obtained at step 4 of the instructions above.

   

4. Fill in the Description field. If this application is set up by a partner, please enter sufficient partner-identifying information, so that all applications set up by this partner can be tracked in the future.

5. Set the State to Enabled.

6. Assign user group D365 FULL ACCESS to the user.

7. (Optional) This step is only required if you did not grant admin consent in step 6d of the instruction above. To complete this step, a redirect URL must be configured in the registered Azure AD application.

At this stage you have all necessary information to set up the Dynamics 365 Business Central integration.