<\/p>\n
- \n
- Paribus 365™ Search and Detect<\/li>\n
- Microsoft Dynamics 365 CRM<\/li>\n
- Azure Active Directory<\/li>\n<\/ul>\n<\/td>\n<\/tr>\n
\n Related Article(s):<\/strong><\/td>\n \n - \n
- None<\/li>\n<\/ul>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n
<\/p>\n
About This Article<\/h2>\n
This article provides an outline of the steps required to enable access to an instance of the Paribus 365™ Cloud Service, to a customer instance of Microsoft Dynamics 365 CRM Online (Azure Active Directory).<\/p>\n
Background<\/h2>\n
As part of the Paribus 365™ for Microsoft Dynamics 365 CRM solution is a cloud instance of the Paribus 365 ™ Cloud Service, which acts as the cloud-hosted search engine service.<\/p>\n
This service contains a collection of content that the Paribus 365™ search engine uses to perform search requests. This content is acquired from the customer instance of Dynamics 365 CRM and is automatically synchronized with the Paribus 365™ Cloud Service instance.<\/p>\n
Connectivity and authentication with the customer instance of Dynamics 365 CRM can be achieved in a variety of ways. Here we outline token-based authentication (OAuth) with Azure Active Directory.<\/p>\n
What is Token-based Authentication<\/h2>\n
Token-based authentication (OAuth) is a process whereby the owner of the service with which we wish to connect\/authenticate to (e.g. customer instance of Dynamics 365 CRM), issues the third-party service with an authentication token.<\/p>\n
The third-party service (e.g. Paribus 365) is then able to use the authentication token as a secure means to connect and authenticate to the target service (e.g. Dynamics 365 CRM).<\/p>\n
In the case of token authentication with Microsoft Dynamics 365 CRM, this is actually authentication to the target Active Directory which owns the Microsoft Dynamics 365 CRM instance (e.g. Azure Active Directory).<\/p>\n
About Authentication Tokens<\/h3>\n
- \n
- Authentication tokens replace the need for any exchange of usernames and passwords.<\/li>\n
- Authentication tokens are not subject to password expiration or multi-factor authentication (MFA) principles.<\/li>\n
- Authentication tokens are issued uniquely to each third-party.<\/li>\n
- Authentication tokens can be revoked (deleted) at any time by the token bearer (e.g. Dynamics 365 CRM customer) – this resulting in all third-party access being revoked\/denied.<\/li>\n<\/ul>\n
Registering the Paribus 365™ Application (Request Permission)<\/h2>\n
The first step in which to achieve authentication with Microsoft Dynamics 365 CRM (Azure Active Directory), is for the Paribus 365™ Cloud Service to request authority from the customers’ Active Directory. This is known as an Application Registration.<\/p>\n
Click this link to begin the application registration process and request to grant Paribus 365™ Access Authority to my Active Directory<\/a>.<\/p>\n
Important Note:<\/strong> The response to this action must be performed by an Azure Active Directory user with authority to perform administration tasks including Application Registrations.<\/p>\n
The above action should present a Microsoft hosted login request (web page):<\/p>\n
![\"\"](\"https:\/\/www.paribuscloud.com\/help\/wp-content\/uploads\/2019\/08\/oauth-authentication-step1.png\")
<\/p>\nThe login being requested here should be completed with the following:<\/p>\n
- \n
- A user account within the Azure Active Directory owning the target instance of Microsoft Dynamics 365 CRM.<\/li>\n
- A user account within the Azure Active Directory with administration privileges to grant authority access.<\/li>\n<\/ul>\n
Upon a successful login to the target Azure Active Directory, the next step is to grant the Paribus 365 application authority to access assets within the Azure Active Directory.<\/p>\n
The key authority that Paribus 365™ requires is access to the Common Data Services (e.g. Dynamics 365 data).<\/p>\n
Microsoft will present the following dialog to request this permission:<\/p>\n
![\"\"](\"https:\/\/www.paribuscloud.com\/help\/wp-content\/uploads\/2019\/08\/oauth-authentication-step2.png\")
<\/p>\nUpon successful completion of this step the Paribus 365™ application will only be permit authority into the target Azure Active Directory and access to the Common Data Service – the level of access permitted at this stage is none and will be defined in later steps below.<\/p>\n
To check the successful registration of the Paribus 365™ application within the Azure Active Directory (optional), access the Azure Portal for your Azure Active Directory by…<\/p>\n
- \n
- View Azure Active Directory<\/strong><\/li>\n
- View Enterprise Applications<\/strong>, and finally<\/li>\n
- View All applications<\/strong><\/li>\n<\/ol>\n
Listed within the Enterprise application should be the Paribus 365™ <\/strong>application.
![\"\"](\"https:\/\/www.paribuscloud.com\/help\/wp-content\/uploads\/2019\/09\/pb365-AD-ss2.png\")
<\/p>\nDefining a Dynamics 365 CRM Application User<\/h2>\n
The final step following the successful registration of the Paribus 365™ application into the Azure Active Directory is to create an Application User account within the target Dynamics 365 CRM instance. This application user will act as the user by which Paribus 365™ will connect to the target Dynamics 365 CRM instance.<\/p>\n
New Application User<\/h3>\n
Using an administration user account, log into Power Platform Admin Center<\/a> – go into the Environment you wish to enable access to Paribus 365™ and select Settings<\/strong>, then Application Users<\/strong>.<\/p>\n
![\"\"](\"https:\/\/www.paribuscloud.com\/help\/wp-content\/uploads\/2019\/09\/pbi_new-app-user_1.png\")
<\/p>\n![\"\"](\"https:\/\/www.paribuscloud.com\/help\/wp-content\/uploads\/2022\/05\/pbi_new-app-user_2.png\")
<\/p>\nSelect the New app user<\/strong> from the top toolbar…<\/p>\n
![\"\"](\"https:\/\/www.paribuscloud.com\/help\/wp-content\/uploads\/2019\/09\/pbi_new-app-user_3.png\")
<\/p>\n…and click Add an app<\/strong>.<\/p>\n
![\"\"](\"https:\/\/www.paribuscloud.com\/help\/wp-content\/uploads\/2019\/09\/pbi_new-app-user_4.png\")
<\/p>\nThen in the search field enter the following Application ID value:<\/p>\n
- \n
- 1ee6affa-24cd-4ce8-a962-a9f0feeaac34<\/strong><\/li>\n<\/ul>\n
Ensure the Paribus 365™ <\/strong> app is selected, and click Add<\/strong>.<\/p>\n
![\"\"](\"https:\/\/www.paribuscloud.com\/help\/wp-content\/uploads\/2019\/09\/pbi_new-app-user_5.png\")
<\/p>\nFinally, select your Business unit<\/strong> and click Create
<\/strong>(Please ignore the Security role<\/strong> for now, as this will be added later in the process or on the day of your Paribus assisted installation)<\/em><\/p>\n![\"\"](\"https:\/\/www.paribuscloud.com\/help\/wp-content\/uploads\/2019\/09\/pbi_new-app-user_6.png\")
<\/p>\nApplication Users are subject to the following:<\/p>\n
- \n
- Do not require a password.<\/li>\n
- Do not require a user licence.<\/li>\n
- Their access is subject to the security roles they are assigned (see next step).<\/li>\n
- Can be removed at any time causing authentication and access to be revoked.<\/li>\n<\/ul>\n
Removing Access\/Registration to Paribus 365™ Search and Detect<\/h2>\n
Should you ever wish to remove the registration of the Paribus 365™ Search and Detect application from your Dynamics 365 CRM instance and Azure Active Directory, this can be achieved from within your Azure Active Directory.<\/p>\n
This action will remove the application registration and thus revoke all authentication and access to the Azure Active Directory and Dynamics 365 CRM tenant(s).<\/p>\n
From within the Azure management portal of the Azure Active Directory to be updated:<\/p>\n
- \n
- Select the Azure Active Directory<\/strong><\/li>\n
- Select Enterprise applications<\/strong><\/li>\n
- Select the Paribus 365™ <\/strong> application<\/li>\n<\/ul>\n
![\"\"](\"https:\/\/www.paribuscloud.com\/help\/wp-content\/uploads\/2019\/09\/pbi_app-remove_.png\")
<\/p>\n- \n
- Select Properties<\/strong><\/li>\n
- Select the Delete<\/strong> option<\/li>\n<\/ul>\n
![\"\"](\"https:\/\/www.paribuscloud.com\/help\/wp-content\/uploads\/2019\/09\/pbi_app-remove_2b.png\")
<\/p>\n<\/p>\n
Removal of the Dynamics 365 Application User<\/h3>\n
Removal of the Dynamics 365 CRM application user is optional but not essential as the registration of the Paribus 365™ Search and Detect application has been removed from the Azure Active Directory thus preventing any further access to this application.<\/p>\n
<\/p>\n
- Select the Delete<\/strong> option<\/li>\n<\/ul>\n
- Select Enterprise applications<\/strong><\/li>\n
- Select the Azure Active Directory<\/strong><\/li>\n
- View Enterprise Applications<\/strong>, and finally<\/li>\n
- View Azure Active Directory<\/strong><\/li>\n
- None<\/li>\n<\/ul>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n