Skip to main content

Setup Guide

This guide walks you through registering an application in Microsoft Entra ID, granting it access to the Dynamics 365 Finance and Operations OData API, and obtaining the credentials required by the connector.

Prerequisites​

  • A Microsoft Dynamics 365 Finance & Operations environment (cloud-hosted or sandbox), with the Fixed assets module enabled and System administration access.
  • Access to the Microsoft Entra admin center for the same tenant as the environment, with permission to register applications.

Step 1: Register an application in Microsoft Entra ID​

  1. Sign in to the Microsoft Entra admin center and navigate to Identity > Applications > App registrations > New registration.
  2. Enter a display name for the application, select the appropriate Supported account types, and select Register.
  3. On the application's Overview page, note the Application (client) ID and Directory (tenant) ID. Both values are required to initialize the connector.

Step 2: Create a client secret​

  1. In the application's left navigation, select Certificates & secrets > Client secrets, then select New client secret.
  2. Add a description, choose an expiration period, and select Add.
  3. Copy and store the secret's Value immediately.
warning

The client secret value is shown only once. Store it securely and never commit it to source control. Supply it to your integration at runtime through a configuration mechanism such as a Config.toml file.

Step 3: Grant Dynamics 365 API permissions​

  1. In the application, select API permissions > Add a permission > APIs my organization uses.
  2. Search for Dynamics ERP (this covers Dynamics 365 Finance and Operations environments) and select it.
  3. Choose Application permissions, select the Dynamics ERP application role appropriate for fixed asset maintenance (.default is not selected here — it is the token-request scope shown in Step 5), and select Add permissions.
  4. Select Grant admin consent for <your tenant> and confirm.
note

Because this connector uses the OAuth 2.0 client credentials grant, the application must be granted application permissions, not delegated permissions, and those permissions must be consented to by a tenant administrator before the connector can obtain an access token.

Step 4: Register the application in Dynamics 365 Finance​

  1. In your Dynamics 365 Finance & Operations environment, create a service account: go to System administration > Users > New, set a User name and User ID, assign the security roles the integration needs (for example, roles that grant access to fixed asset maintenance duties, such as depreciation, asset value models, or leasing), and save the record.
  2. Go to System administration > Setup > Microsoft Entra applications and select New. Enter the Application (client) ID from Step 1 as the Client Id, give the entry a descriptive Name, and map it to the User ID created above. Do not paste the client ID into the user record's Identity provider object ID field — that does not establish the required Finance application registration mapping.

Step 5: Locate the service URL​

  1. While signed in to your Dynamics 365 Finance & Operations environment, note the base URL shown in the browser address bar, for example https://<your-org>.operations.dynamics.com.

  2. Append /data to this URL to form the OData root that the connector uses as its serviceUrl:

    https://<your-org>.operations.dynamics.com/data

With the tenant ID, client ID, client secret, and service URL collected, you have everything the connector needs to authenticate and connect.

What's next​