Dynamics Community Forum Thread Details

Dear IT Professionals,

In order to get Permissions Sets better to know in Business Central, I've setup a BC220 Cronus Demo in a VM.

I would like to use NAV User authentication method instead of the default one (Windows User).

I followed this instruction https://learn.microsoft.com/en-us/dynamics365/business-central/dev-itpro/administration/authenticating-users-with-navuserpassword?tabs=adminshell#task-2-configure-

Accordingly with the Cronus limitations, it should be possible to use multiple users simultaneously: https://learn.microsoft.com/en-us/dynamics365/business-central/dev-itpro/developer/properties/devenv-demolicense-properties#limitations-of-the-demo-license

Unfortunately when launching the webclinet, I am not getting a prompt window, instead:

/You do not have access to Dynamics Business Central/

Is it even possible to have the following config in Cronus DEMO?

Is there a better way of having a two user setup for this testing purposes?

Thank you!

Categories:

Business Central

Thank you for help.

{
"NAVWebSettings": {

"//AllowedFrameAncestors": [
"Specifies the comma seperated list of allowed frame ancestor URIs when web client is hosted inside an iframe.",
"The uris can contain wildcards. Example values: 'https: mysite.sharepoint.com,https: yoursite.sharepoint.com', 'https: *.myportal.com' "
],
"AllowedFrameAncestors": "https://teams.microsoft.com",

"//AllowedCrossFrameMessageAncestors": [
"Specifies the comma seperated list of allowed frame ancestor URIs that can send messages to the iframe.",
"The uris can contain wildcards. Example values: 'https: mysite.sharepoint.com,https: yoursite.sharepoint.com', 'https: *.myportal.com' "
],
"AllowedCrossFrameMessageAncestors": "",

"//GlobalEndpoints": "Specifies the comma seperated list of global endpoints that are allowed to call this web site. Must include http scheme and FDQN. E.g. https://financials.microsoft.com; The already defined values are standard values to enable connection via the mobile app.",
"GlobalEndpoints": "null,ms://businesscentral,ms://dynamicsnav",

"//AllowNtlm": "Specifies whether NTLM fallback is permitted when authenticating. To require Kerberos authentication, set this value to false.",
"AllowNtlm": false,

"//ClientServicesCompressionThreshold": [
"Sets the threshold in memory consumption at which Business Central Web client starts compressing data sets.",
"This limits amount of consumed memory. The value is in kilobytes."
],
"ClientServicesCompressionThreshold": 64,

"//Server": "The name of the computer running the Business Central Server to connect to.",
"Server": "localhost",

"//ServerInstance": "Name of the Business Central Server instance to connect to (for client) or listen on (for server).",
"ServerInstance": "",

"//ServerHttps": "If the Business Central Server instance has the setting 'ClientServicesSSLEnabled' set to true then this settings must also be set to true.",
"ServerHttps": false,

"//ClientServicesCredentialType": [
"The type of client credential used for authentication.",
"Possible values:",
"Windows - Windows authentication is used, and client will connect with 'current user'",
" this user is expected to be the same and known to both server and client",
" This is the default mode and is typically used on a LAN with Active Directory,",
" In this mode X.509 certificates are not used and options set below are ignored",
"UserName - Windows authentication on the server. Client is expected to present username/password",
" indentifying a windows user known (created) on the server.",
" Typically the client will ask for these credentials and pass them to the server",
" Certificates are used to protect the passing of credentials.",
" This is typically used when only the server is part of an Active Directory, or",
" when the client is not trusted, e.g. connection over a WAN/Internet",
"NavUserPassword - Authentication is managed by the server but not based on windows users.",
" Client is expected to present username/password matching a user known to the server.",
" Typically the client will ask for these credentials and pass them to the server",
" Certificates are used to protect the passing of credentials.",
" This mode is used in hosted environments e.g. Azure where the list of allowed users",
" are maintained by Business Central and not based on windows users.",
"AccessControlService - Authentication for the Web Client is handled by Microsoft Azure Access Control Service (ACS).",
" An ACS namespace needs to be set up before. Also the Identity Providers need to be set up",
" as well as the Relying Party representing the Business Central Web Client.",
" To support ACS, you must specify the WS-Federation Login Endpoint in the Business Central Server",
" instance configuration file (key = WSFederationLoginEndpoint)."
],
"ClientServicesCredentialType": "NavUserPassword",

"//AadApplicationId": "The application ID assigned to the registered application in Azure Active Directory for authenticating Business Central users. This setting is only used when ClientServicesCredentialType is set 'AccessControlService'.",
"AadApplicationId": "",

"//AadAuthorityUri": "The authority to use when making Azure Active Directory authentication calls. The value has the format 'https://login.microsoftonline.com/<Azure AD tenant ID>'. This setting is only used when ClientServicesCredentialType is set 'AccessControlService'.",
"AadAuthorityUri": "",

"//ClientServicesPort": "The listening TCP port for the Business Central Server. This is part of the server's URL. Valid range: 1-65535",
"ClientServicesPort": "7085",

"//ManagementServicesPort": "The listening TCP port for the Business Central management endpoint. Valid range: 1-65535",
"ManagementServicesPort": "7045",

"//ServicePrincipalNameRequired": [
"Specifies whether the connection to the Business Central Server instance requires an SPN.",
"If true, the connection will only be made to a service with an SPN <ServerInstance>/<Server>:<ClientServicesPort>",
"If false, the connection will be attempted to a service with or without an SPN."
],
"ServicePrincipalNameRequired": false,

"//SessionTimeout": [
"Specifies the amount of time that a connection between the Business Central Web client and the Business Central Server can remain idle before the session is stopped.",
"Time span format: [dd.]hh:mm:ss[.ff]",
" dd: days",
" hh: hours",
" mm: minutes",
" ss: seconds",
" ff: fractions of a second"
],
"SessionTimeout": "00:20:00",

"//RequireSsl": "Specifies whether SSL (https) is required. If the values is set to true all cookies will be marked with a 'secure' attribute.",
"RequireSsl": "true",

"//ShowPageSearch": [
"Specifies whether to show the search action for finding a page or report.",
"The action appears in the ribbon and navigation pane of the web client."
],
"ShowPageSearch": true,

"//DnsIdentity": "The subject name (common name) from the server certificate.",
"DnsIdentity": "",

"//AuthenticateServer": "Specifies whether to authenticate the server.",
"AuthenticateServer": "true",

"//HelpServer": [
"Name of the Business Central Help Server to connect to."
],
"HelpServer": "",

"//HelpServerPort": "The listening TCP port for the Business Central Help Server. Valid range: 1-65535",
"HelpServerPort": "49000",

"//useAdditionalSearchTerms": "Specifies if the additional search terms should be used when searching.",
"useAdditionalSearchTerms": true,

"//SaveValueToDatabasePromptly": "Specifies whether all clients use promptly saving of edited fields to the database.",
"SaveValueToDatabasePromptly": false,

"//AnalysisModeClientSideMaxRowCount": "Specifies the max number of rows that can be loaded to the client (browser) when Analysis mode is performed client side.",
"AnalysisModeClientSideMaxRowCount": 100000
}
}

BC220 Cronus DEMO Using NAV authentication as a login method

Helpful resources

News and Announcements

Quick Links

December Spotlight Star - Muhammad Affan

Community AMA December 12th

New! Quick response templates⚡

Leaderboard

Featured topics

Product updates