Small and medium business | Business Central, N...

Auth: System-to-System Connect

(9) Share

Report

Posted on by AriHeitner

We are attempting to authorize an Entra application we have created to access D365 with a System-to-System connection (we have a working flow with a user connection, but System-to-System is the preferred method).

We have created the Entra APP in Dynamics and given it the following permissions:

And the following permissions from the Entra end:

We are getting an access token, but when we try to actually request records, we get back an error response:

<error xmlns="http://docs.oasis-open.org/odata/ns/metadata"><code>Unauthorized</code><message>The credentials provided are incorrect</message></error>

What are we doing wrong?

Categories:

Dynamics 365 Business Central

I have the same question (0)

All responses (13)

Answers (0)

André Arnaud de Cal... 303,669 Super User 2026 Season 1 on at

Like (5)

Report
Copy link

Link copied!

Moved the question from the Dynamics 365 General to the Dynamics 365 Business Central forum.

Was this reply helpful? Yes No
Suggested answer

NAV_with_Narang 2,320 Moderator on at

Like (4)

Report
Copy link

Link copied!

Hi AH-01101805-0,

I do think you need confirm if you have selected OAuth2.0 in your power automate flow. System-to-System describes the purpose, not the method. Also while using https trigger, the BC APIs work

Seems like your power automate flow is not generating the access token before passing it through to Azure

Please also run a test in POSTMAN in calling the API first, before running in PA. https://yzhums.com/20690/

Was this reply helpful? Yes No
Suggested answer

YUN ZHU 99,055 Super User 2026 Season 1 on at

Like (3)

Report
Copy link

Link copied!

The error message is Unauthorized: The credentials provided are incorrect. So this is still a certification issue.

I also suggest testing it in Postman first. Below is how to use OAuth in Power Automate, which I hope will give you some hints.

Using OAuth 2.0 to connect Business Central APIs and Web Services in Power Automate – OAuth in HTTP action

https://yzhums.com/33195/

Thanks.

ZHU

Was this reply helpful? Yes No
Suggested answer

OussamaSabbouh 12,803 Super User 2026 Season 1 on at

Like (2)

Report
Copy link

Link copied!

Hello,

Use the client credentials flow and request the token for:
https://api.businesscentral.dynamics.com/.default

Make sure your Entra app has API.ReadWrite.All, Automation.ReadWrite.All, and app_access permissions, then use that token to call BC APIs.

Regards,
Oussama Sabbouh

1 people found this reply helpful.

Was this reply helpful? Yes No
Suggested answer

Khushbu Rajvi. 22,128 Super User 2026 Season 1 on at

Like (4)

Report
Copy link

Link copied!

Have you checked the API using Postman? Is it working in Postman?

Was this reply helpful? Yes No
AriHeitner 66 on at

Like (5)

Report
Copy link

Link copied!

Hi @YUN ZHU @OussamaSabbouh @Khushbu Rajvi. @NAV_with_Narang!

Here are the same requests in POSTMAN.

First, the auth request:

You can see I am making a token request to the correct tenant, specifying the client_id and client_secret, which have been configured in Entra Applications as above with the permissions I showed above, and I am receiving back an access token.

But when I make a request to get data - like the list of companies - I get back the message I showed before:

You can see I am using the same token I received above.

When I try the same request with a token obtained through a user login grant, I get correct results:

What am I doing wrong?

Was this reply helpful? Yes No
Suggested answer

Aman Kakkar 2,977 Super User 2026 Season 1 on at

Like (2)

Report
Copy link

Link copied!
Hi,

Why not just do both the process - Token Generation and GET Request - in one API request?

Try the below approach -

Add your GET Request URL.

Go to Authorization, and select Type as OAuth 2.0.

Add your configurations as mentioned below in screenshot. Replace with your Client ID and Client secret, and in the Access Token URL, add your Tenant ID.

Click on Get New Access Token, and then click on Proceed, and then Use Token.

Then just send the GET request, it will automatically use the token you just generated.

Do mark it as verified if this helps.

Aman K

Was this reply helpful? Yes No
Suggested answer

YUN ZHU 99,055 Super User 2026 Season 1 on at

Like (2)

Report
Copy link

Link copied!

I agree with Aman; I did the same in the discussion below.

Using OAuth to connect Business Central APIs and Web Service in Postman

https://yzhums.com/20690/

Thanks.

ZHU

Was this reply helpful? Yes No
AriHeitner 66 on at

Like (2)

Report
Copy link

Link copied!

@Aman Kakkar what value are you using for the SCOPE in your OAUTH request?

I think that is missing from our OAUTH request and that may be part of the problem.

thanks!

Ari

Was this reply helpful? Yes No
Suggested answer

Aman Kakkar 2,977 Super User 2026 Season 1 on at

Like (2)

Report
Copy link

Link copied!

Hi @AriHeitner,

Here's the scope you need to use - https://api.businesscentral.dynamics.com/.default

Do mark it as verified if this helps.

Aman K

Was this reply helpful? Yes No