How to Connect
Prerequisites
Before setting up the Microsoft Dynamics 365 integration in iPaaS.com, ensure you have the following:
A Microsoft Dynamics 365 Business Central account with admin access.
Access to the Microsoft Entra Admin Center for app registration.
The following values from the registered app:
Tenant ID
Client ID
Client Secret
Scope
How to Create an Application for iPaaS.com Integration
To set up authentication for either OAuth 2.0 Client Credentials Grant or Authorization Code Grant, an application must be created in the Microsoft Entra Admin Center. Follow these steps:
Navigate to the Microsoft Entra Admin Center.
Log in with your Microsoft Admin Account.
Go to Applications → App Registrations.
Click on Create New Registration.
Provide a display name for this application.
Select the appropriate option to determine who can use this application.
Provide a Redirect URI (optional);
Use this URI for returning authentication responses:
https://portal.ipaas.com/customer/subscription-mgmt/subscriptions/authorization/app
Note: In this scenario, the Tenant ID will remain the same as we are using a single tenant belonging to Red Rook.
Steps to Generate Client Credentials
Click on the Certificates & Secrets tab.
Click on New Client Secret.
Add a description and set the expiration period for the client secret.
Click on Add to generate the client secret.
Note: Ensure to save the client secret in a secure location, as it can only be copied once and will not be displayed again.
Steps to Add Permissions in Dynamics 365 Business Central
To grant the necessary permissions for Microsoft Dynamics 365 Business Central:
Navigate to API Permissions in the Microsoft Entra Admin Center for your application and click on Add a Permission.
In the Request API Permissions dialog, select Dynamics 365 Business Central.
This step adds accessibility to Dynamics 365 Business Central data and functionality.Assign the desired Application Permissions to the user.
Example: Application.ReadWrite.All for full access to the API.Review the permissions that have been added to your application under API Permissions. Verify that all required permissions are present and correctly assigned.
Configure Subscription Settings
Below are the fields required to configure your Microsoft Dynamics 365 subscription in iPaaS.com:
Field | Description | Required | Example |
Name | A unique name for identifying your subscription. | Yes | Dynamics365_Integration |
Versions | The integration version. | Yes | v1.0 |
Company Name | The name of your organization. | Yes | YourCompany |
Tenant ID | The directory (tenant) ID from app registration. | Yes | YourTenantID |
Scope | The scope for API permissions. | Yes | |
Client Secret | The secret key generated for the application. | Yes | YourClientSecret |
Client ID | The application (client) ID from app registration. | Yes | YourClientID |
Grant Type | The type of authentication grant used. | Yes | client_credentials |
Environment | The Dynamics 365 environment (e.g., Sandbox, Prod). | Yes | iPaaS_Sandbox |
API URL | The base API URL for Dynamics 365. | Yes |
How to Populate Subscription Settings
Follow these instructions to locate the required information and populate the subscription fields in iPaaS.com:
API URL: The base API URL for Microsoft Dynamics 365 is:
https://api.businesscentral.dynamics.com
.Environment: The environment (e.g., Sandbox or Production) is configured in Dynamics 365. To locate your environment:
Go to Settings → Admin Center in Dynamics 365.
Navigate to Operations to view and select the environment.
Grant Type: Must be set to client_credentials in all configurations.
Client ID:
Client Secret: Generate a client secret in the Microsoft Entra Admin Center:
Scope: is set to:
https://api.businesscentral.dynamics.com/.default
.Tenant ID:
Company Name: The name of your company in Dynamics 365 is required. To locate this:
Authentication Methods
OAuth 2.0 Client Credentials Grant
The OAuth 2.0 client credentials grant flow permits a web service (confidential client) to use its own credentials, instead of impersonating a user, to authenticate when calling another web service. In this flow:
Permissions are granted directly to the application by an administrator.
The app itself has authorization to perform actions as there is no user involved in the authentication.
This flow provides an access token valid for 60 minutes (1 hour). To generate an access token, ensure the following details are correctly configured in Subscription Settings:
Tenant ID: The directory (tenant) ID where the application is registered.
Grant Type: Must be statically set to
"client_credentials"
.Client ID: The application (client) ID assigned to your app during registration.
Client Secret: The secret key generated for the application. (Value must be saved in a secure location).
Scope: The specific permissions or resources the app is requesting access to.
Note: Must be statically set to https://api.businesscentral.dynamics.com/.default for this configuration.
The value passed for the scope parameter in this request should be the resource identifier (application ID URI) of the resource you want, suffixed with .default.
The .default scope is used to refer generically to a resource service (API) in a request, without identifying specific permissions.”
Initialization Support
The following types of data support initialization and can be transferred in bulk:
Customer Category TO iPaaS.com
Location TO iPaaS.com
Shipping Method TO iPaaS.com
All other data types must be configured manually during the integration process.
Throttling
Throttling ensures that 365's API isn’t overwhelmed by excessive API calls, preserving system performance during heavy data transfers.
While the throttling fields are required, the values are pre-populated by the integration settings. For more details, refer to Subscription Configuration – Edit.
Troubleshooting
Missing Credentials or Errors in API Configuration
Ensure all required fields in subscription settings are completed (e.g., Tenant ID, Client ID, Client Secret, and Scope).
Verify that permissions have been granted in API Permissions for Dynamics 365 Business Central.
Debugging OAuth Issues
For expired or invalid tokens, reauthorize the application in the Entra Admin Center.
Ensure the Redirect URI matches exactly with the one provided during app registration.