Microsoft Dynamics 365 Business Central

This guide explains how to set up Service-to-Service Authentication (OAuth2) in Business Central Online.

---

Step 1: Register an Application in Azure Active Directory

1. Go to App registrations in Azure Active Directory.
2. Click New registration.

---

Step 2: Configure the App Registration

1. Enter a name for your app.
2. Choose Accounts in this organizational directory only (Development only - Single tenant) as the account type (unless instructed otherwise).
3. Set the redirect URI to:
   https://businesscentral.dynamics.com/OAuthLanding.htm
4. Click Register.

---

Step 3: Grant API Permissions

1. Navigate to API permissions and click Add a permission.

   

2. Select Microsoft APIs, then choose Dynamics 365 Business Central.

   

3. Choose Application permissions.

4. Check the permission API.ReadWrite.All.

5. Click Add permissions.

   

---

Step 4: Generate a Client Secret

1. Go to Certificates & secrets.

2. Click New client secret.

   

3. Choose an expiry period (12 months recommended).

   

4. Copy the Value of the client secret and store it in a secure location.

   ⚠️ This is the only time you will be able to view the secret value.

   

---

Step 5: Configure the Application in Business Central

1. In Business Central, search for Azure Active Directory Applications.

   

2. Click New to create a new entry.

   

3. Enter the Application (client) ID and a description.

4. Assign the necessary permissions.

5. Click Grant Consent.

   🛡️ This must be done by a user with one of the following roles:

   • Global Administrator
   • Application Administrator
   • Cloud Application Administrator

   

---

Step 6: Final Steps

Send the following information to support@exopen.se:

• Tenant ID
• Client ID
• Client Secret