Microsoft Dynamics
  • 03 May 2023
  • 4 Minutes to read
  • Dark
    Light
  • PDF

Microsoft Dynamics

  • Dark
    Light
  • PDF

Article summary

This guide will teach you how to set up the connector between Microsoft Dynamics and Clarity Security.

Estimated time to complete: 25 minutes

If you encounter any problems, please contact your support team or support@claritysecurity.io.

Supported Connector Capabilities

Below are capabilities supported by the connector at this time.

Method
Supported
Provision User
Yes
List Groups, Policies, and Roles
Yes
Add User to Groups, Policies, and Roles
Yes
Remove User from Groups, Policies, and Roles
Yes
Deactivate User
Yes
Delete User
Yes
Before You Begin:
  • Register an application with Azure Active Directory, which enables a user with Power Apps user account to connect to their Microsoft Dataverse environment. 
  • Azure subscription for application registration.

Here is an article from Microsoft that could be helpful in this process. 

How to Setup the Connector

Step 1. Sign in to Azure

Step 2. In Azure, select Azure Active Directory 

On the left side and select App registration and click on New registration.

Azure Active Directory > App registration > New registration

Step 3. In the Register an application page, enter your application's registration information:

  • Name: Clarity Security Connector
  • Who can use this: Accounts in any organizational directory (Any Azure AD directory- Multitenant)
  • Redirect URI: (not optional!)

           a. Platform: Web

           b. URI: https://[YOURCLARITYSUBDOMAIN].claritysecurity.io/application/oauthProcessCode/microsoft-dynamics

Step 4. On the app Overview page, hover over the Application (client) ID and select the Copy to clipboard icon to be used later. Then hover over the Directory (tenant) ID and copy it for later.

Application (client) ID and Directory (tenant) ID

Step 5. Select the Manifest tab in the manifest editor, set the allowPublicClient* to true, and click Save.

App Manifest

Step 6. Select the API permissions tab and click Add a permission.

API Permissions > Add a permission

Step 7. Search for and choose Dataverse under the APIs my organization uses tab. 

Note: If "dataverse" is not found, look for the most likely options: Dynamics 365 Business Central, Dynamics CRM, Dynamics ERP, or Customer Insights. 

Step 8. Click on Delegated permissions and check all options > click Add permissions. Repeat for each API.

Delegated Permissions for Dynamics CRM > user_impersonation is checked

Step 9. Go to Certificates & secrets and click on New client secret

Step 10. Enter a description like "Clarity Connector" and an expiration date of 24 months > click Add.

Add a client secret > 24 month expiration

Step 11. Copy the 2nd secret

Note: you only have one chance to copy this. You will see ***** after refreshing the screen.

Client secrets > 2nd secret value

Step 12. The final thing you need to gather before connecting is the URL of your Dynamics 365 account.

Custom Dynamics 365 URL

Step 13. Navigate to Power Platform admin center and log in.

Step 14. Click on the Environments link in the sidebar.

Power Platform > Environments

Step 15. In the Environments list, find your Microsoft Dynamics account and highlight it by clicking on it, and a menu will appear above it. Click the Settings button.

Environments Settings

Step 16. Click the drop-down button for Users + permissions and click the link for Application Users

Settings > Application Users

Step 17. Click on + New app user.

+New app user

Step 18. Click the + Add an app button.

Add an app

Step 19. Search for the app you created in Step 3 and click on it. Then click the Add button on the bottom. 

Add an app from Azure Active Directory

Step 20. Select your business unit. 

Note: This should match the subdomain in the URL, as shown in Step 12.

Create a new app user

Step 21.  Click the pencil icon to add a security role. Scroll to find System Administrator. Click on it and then click Save.

System Administrator Security Role

Step 22. Log into Clarity Security.

Step 23. Click on Applications and select Marketplace.

Applications > Marketplace

Step 24. Scroll to find Microsoft Dynamics and click Connect.

Microsoft Dynamics App Connector

Step 25. Fill out the Connect App form with the proper credentials.

Complete the App Settings form.  Details for fields common to all applications can be found in the following article: Common App Configuration Steps.

  • Application: Microsoft Dynamics
  • client_id: Paste from Step 4.
  • client_secret: Paste from Step 11.
  • tenant_id: Paste from Step 4.
  • URL: Paste from Step 12.
  • If you will be connecting Clarity Security to multiple Dynamics 365 environments, change the Name & Unique identifier fields to reflect the specific environments this connector is communicating with.
  • Access via: API

Configure App Step 1 - Connect App

Step 26. Fill out the App Settings form.

Complete the App Settings form.  Details for each field can be found in the following article: Common App Configuration Steps.

Configure App Step 2 - App Settings

Step 27. Fill out the User Settings form.

Complete the User Settings form, check the table at the top to see if any features are unsupported.  Details for each field can be found in the following article: Common App Configuration Steps.

Configure App Step 3 - User Settings

Step 28. Validate Your Selections and Save.

Save
Clicking the Save button will trigger the first full sync for your application (even if you selected Manual syncing).  This includes Service Users, Entitlements, Service User Entitlements, Service User Attributes.

Need Help?

If you have any problems, contact your customer success team. You can also get in touch with our general support via email, open a support ticket. Our general support team is available Monday - Friday from 8:00 AM - 6:30 PM CST.



Was this article helpful?

Changing your password will log you out immediately. Use the new password to log back in.
First name must have atleast 2 characters. Numbers and special characters are not allowed.
Last name must have atleast 1 characters. Numbers and special characters are not allowed.
Enter a valid email
Enter a valid password
Your profile has been successfully updated.