Microsoft Entra ID for Business Central
Responsibility: Customer
The Entra app enaioAccessApp is used by Business Central backend to connect with the enaio system.
Enterprise Application
Create Enterprise Application
Create the enterprise application with the following settings:
Register an application to integrate with Azure AD.
Create the app registration with the following settings:
Specify a name i.e. enaioGatewayApp
Single tenant account
WEB redirect URL https://your.domain
It is assumed, that enaio Gateway NG processes requests from https://your.domain.
Object ID
Make a note of the Object ID (under Enterprise Application) that will be returned for this app from AAD after verification.
This ID has to setup as a technical enaio user.Note that the Object ID of the Enterprise Application is not the same as the Object ID from the Registered App.
App Registration
After creating the Enterprise Application, go to the App Registration and select the previously created app.
Authentication
Assure that following WEB Redirect URLs have been configured:
https://businesscentral.dynamics.com/{MS Tenant ID}/OAuthLanding.htm
Production Environment: Replace {MS Tenant ID} with the Microsoft Tenant ID of the Customer company!https://businesscentral.dynamics.com/{MS Tenant ID}/sandbox/OAuthLanding.htm
Sandbox Environment named 'Sandbox': Replace {MS Tenant ID} with the Microsoft Tenant ID of the Customer company!
API permissions
Ensure that the following API permissions have been added:
delegated: Microsoft Graph => User.ReadIf not all these permissions have been set, use Add a permission for the required API.
Grant admin consent to avoid that users must grant the permission for this app on first access.
Generate Secrets
Define a name and lifetime for the new secret.
After creation, make a note of the secret by copying the value of the field Value.
The value property won't be accessible later and only be shown as in the picture above.