Small and medium business | Business Central, N...

Implementing SSO for External Application Access in Dynamics 365 Business Central

(5) Share

Report

Posted on by Inkey Solutions

2,100

We are exploring options to implement Single Sign-On (SSO) for seamless authentication from Dynamics 365 Business Central to an external reporting portal. The objective is to allow users already logged into Business Central to access the external system without requiring them to log in again.

To achieve this, we need clarification on the following:

Does Business Central support SAML-based SSO for authenticating users in external applications?
What is the recommended approach for securely passing authentication details from Business Central to an external system?
How can Business Central users be mapped to the corresponding users in the external application to ensure proper access control?
Are there any Microsoft guidelines or recommended configurations for setting up SSO between Business Central and a third-party system?

Any insights or references to official documentation would be greatly appreciated. Thanks in advance!

Categories:

Microsoft Dynamics NAV

Dynamics 365 Business Central

Dynamics 365 Business Central migration

I have the same question (0)

All responses (4)

Answers (0)

Suggested answer

Ramesh Kumar 7,527 Super User 2025 Season 2 on at

Like (0)

Report

Hi,

Yes, Dynamics 365 Business Central supports integration with Azure Active Directory (Azure AD), which enables SSO using industry-standard protocols such as SAML. Think approach for securely passing authentication details is through OAuth 2.0 or OpenID Connect (OIDC) tokens, which are industry standards for secure token-based authentication. These tokens can be issued by Azure AD and used for secure access to external applications.

1. Azure AD User Principal Name (UPN): The unique identifier for users in Azure AD, which is typically their email address.

2. Azure AD Object ID: A unique identifier for each user in Azure AD

Thanks

Ramesh

If this helped you, please check the box Does this answer your question?

Was this reply helpful? Yes No
Suggested answer

Jainam M. Kothari 15,639 Super User 2025 Season 2 on at

Like (1)

Report

Hello,

Implementing Single Sign-On (SSO) for seamless authentication from Dynamics 365 Business Central to an external reporting portal is a great way to enhance user experience and security. Here are the answers to your questions:

1. Does Business Central support SAML-based SSO for authenticating users in external applications? Business Central does not natively support SAML-based SSO. Instead, it uses Microsoft Entra ID (formerly Azure Active Directory) for authentication, which supports OpenID Connect and OAuth protocols

2. What is the recommended approach for securely passing authentication details from Business Central to an external system? The recommended approach is to use OAuth 2.0 for securely passing authentication details. OAuth allows Business Central to authenticate users and obtain access tokens that can be used to access external systems
This ensures that authentication details are securely managed and passed between systems.

3. How can Business Central users be mapped to the corresponding users in the external application to ensure proper access control? To map Business Central users to corresponding users in the external application, you can use Microsoft Entra ID to manage user identities. By associating Business Central user accounts with Microsoft Entra ID user accounts, you can ensure that users are properly authenticated and authorized across both systems. Additionally, you can use user groups and permission sets in Business Central to manage access control

4. Are there any Microsoft guidelines or recommended configurations for setting up SSO between Business Central and a third-party system? Yes, Microsoft provides guidelines for setting up SSO using Microsoft Entra ID. The key steps include:
•            Registering your external application in Microsoft Entra ID.
•            Configuring Business Central to use Microsoft Entra authentication with OpenID Connect.
•            Setting up OAuth 2.0 for secure token exchange

May this can help : https://yzhums.com/9136/
https://learn.microsoft.com/en-us/dynamics365/business-central/ui-how-users-permissions
https://learn.microsoft.com/en-us/dynamics365/business-central/dev-itpro/administration/tenant-admin-center-manage-access
https://learn.microsoft.com/en-us/dynamics365/business-central/dev-itpro/administration/authenticating-users-with-azure-active-directory?tabs=singletenant%2Cadmintool
https://learn.microsoft.com/en-us/dynamics365/business-central/dev-itpro/webservices/authenticate-web-services-using-oauth

Was this reply helpful? Yes No
Gerardo Rentería Ga... 25,225 Most Valuable Professional on at

Like (1)

Report

Hi, good day
I hope this can help you, and give you some hints.

User Authentication with Microsoft Entra ID for Single Sign-on - Business Central | Microsoft Learn

Authenticating Business Central Users with Microsoft Entra ID - Business Central | Microsoft Learn

Signing in with your Microsoft 365 account

Best Regards
Gerardo

Was this reply helpful? Yes No
Suggested answer

Khushbu Rajvi. 20,439 Super User 2025 Season 2 on at

Like (1)

Report

Hope this helps: https://learn.microsoft.com/en-us/dynamics365/business-central/dev-itpro/administration/automation-apis-using-s2s-authentication

Was this reply helpful? Yes No