Dynamics 365 Portal OData Feed Security Issue

(0) Share

Report

Posted on by Community Member

Hi,

I set up the entity list for contact and enable the odata feed. That I can use the odata feed link to get the contact list data directly. However, it seems any one can get the data by the odata feed, anyone can give me the idea to control only the authentication user can use the odata feed to get the authenticated records?

*This post is locked for comments

I have the same question (0)

All responses (5)

Answers (0)

Suggested answer

Shahbaaz Ansari 6,211 on at

Like (0)

Report

Hi,

Please check below link,

community.dynamics.com/.../configuring-odata-feed-for-entity-list-in-portal-in-dynamics-365

Best Regards,

Shahbaaz

Was this reply helpful? Yes No
Tyler Page 80 on at

Like (0)

Report

Hi Chin,

Did you ever find a solution to this? I am having the same issue.

-Tyler

Was this reply helpful? Yes No
Suggested answer

Arpit Shrivastava 7,518 User Group Leader on at

Like (0)

Report

Hi,

Currently there is no mechanism in Microsoft Portal to enable OData Feeds for only Authenticated Users. It's anonymous.

The best way to provide security to OData Feeds is Liquid Template.

You can write Liquid Code/Fetch XML to retrieve the data from CRM and return the JSON in response. Now you can use that JSON on multiple webpages in order to retrieve the CRM data in secured manner.

Check this article:

colinvermander.com/.../dynamics-365-portals-use-liquid-to-return-json-or-xml

If found useful, please mark the answer as verified.

Cheers

Arpit

arpitmscrmhunt.blogspot.com

Was this reply helpful? Yes No
Suggested answer

Arpit Shrivastava 7,518 User Group Leader on at

Like (0)

Report

In Dynamics 365 Portal, Enable Entity Permission on Entity List (made for enabling OData). And associate Authenticated User web role to that respective entity's entity permission.

By doing this only authenticated user would be able to access the CRM data using Odata.

Cheers

Arpit

Was this reply helpful? Yes No
WaseemM 10 on at

Like (0)

Report

Is this working? can you post a step by stem guide as i'm not able to make it work, maybe i'm doing something wrong.

Was this reply helpful? Yes No