Small and medium business | Business Central, N...

Getting companies doesn't work, show error "Authentication_InvalidCredentials"

(1) Share

Report

Posted on by VS-29080835-0

In application add this permissions.

Dynamics 365 Business Central (2)
Financials.ReadWrite.All	Delegated	Access Dynamics 365 Business Central as the signed-in user	No
user_impersonation	Delegated	Access as the signed-in user	No

In Microsoft Entra Application Card create new entry with client_id. Set "Enabled" and set permission "D365 FULL ACCESS".

Correctly get access token:

GET https://login.microsoftonline.com/{tenant_id}/oauth2/v2.0/token
body = {
    'grant_type': 'client_credentials',
    'client_id': client_id,
    'client_secret': client_secret,
    'scope': 'https://api.businesscentral.dynamics.com/.default'
}

From this reference formed URL to getting companies.

https://learn.microsoft.com/en-us/dynamics365/business-central/dev-itpro/api-reference/v2.0/endpoints-apis-for-dynamics

https://learn.microsoft.com/en-us/dynamics365/business-central/dev-itpro/api-reference/v2.0/api/dynamics_company_get

GET https://api.businesscentral.dynamics.com/v2.0/sandbox/api/v2.0/companies
headers = {
    'Authorization': f'Bearer {access_token}',
    'Accept': 'application/json'
}

Why I am getting this error.

{

    "error": {

        "code": "Authentication_InvalidCredentials",

        "message": "Web service call failed because user could not be authenticated or authorized.  CorrelationId:  c5638e54-3987-4a5a-93bc-6e755f11d011."

    }

}
 
Also try different requests:
https://api.businesscentral.dynamics.com/v2.0/sandbox/api/v2.0/companies?tenant=tenant_idhttps://api.businesscentral.dynamics.com/v2.0/tenant_id/sandbox/api/v2.0/companies
 
In addition, I will say that I have experience using Microsoft Graph.
Then try use this tutorial: https://yzhums.com/20690/
 
Thank you in advance. 

Regards
Vitalik

I have the same question (0)

All responses (4)

Answers (0)

Suggested answer

Khushbu Rajvi. 20,947 Super User 2025 Season 2 on at

Like (2)

Report

Hi, Please confirm if you have added custom extension in User Permission Sets on MEA.

Was this reply helpful? Yes No
Suggested answer

YUN ZHU 95,761 Super User 2025 Season 2 on at

Like (1)

Report

Hi, It seems to be an authentication issue. A simple test:

https://api.businesscentral.dynamics.com/v2.0/7e47da45-7f7d-448a-bd3d-1f4aa2ec8f62/Sandbox/api/v2.0/companies

Hope the following helps.

Using OAuth to connect Business Central APIs and Web Service in Postman

https://yzhums.com/20690/

Thanks.

ZHU

Was this reply helpful? Yes No
VS-29080835-0 4 on at

Like (0)

Report

My extension are not in list "User Permission Sets" on MEA. It seems that this is not required for the Postman request.

But I am add information to this post and list all permissions which add to Microsoft Entra Application Card in Sandbox.

May be need only "D365 FULL ACCESS" but also added another permissions.

ClientID from App also verified if it correct.

Microsoft Azure application permissions for Dynamics 365 Business Central is: "Financials.ReadWrite.All", "user_impersonation".

Postman also tried to use and still get the same result.

Screen for check may be I did mistake in data.

Access Token URL: https://login.microsoftonline.com/c7......................./oauth2/v2.0/token
Scope: https://api.businesscentral.dynamics.com/.default
"Advanced" part in Authorization leaved clear.

TenantID and Client Secret also checked if it correct and Expires date.

"Get New Access Token" successfully execute. Pushed button "Use Token".

Then send request and get same error "Authentication_InvalidCredentials". CorrelationId: 44d007ea-b579-4243-9c1d-f8e87ab40470.

If in respond from request was more precisely data in error message about mistake in request data then it easier was to solve.

All data I check many times.

Thank you in advance.
Regards
Vitalik

Was this reply helpful? Yes No
Suggested answer

Khushbu Rajvi. 20,947 Super User 2025 Season 2 on at

Like (2)

Report

Hi Vitalik, I suggest that you add a custom extension to the User Permission Sets in MEA. I strongly believe this is the main issue. Please make this change and test it again.

If your extension is not in the list, you can create a permission set for it in VSC and publish it. Once you do this, your extension should appear in the permission sets, and you will be able to assign the appropriate permission set to the specific extension.

Was this reply helpful? Yes No