Dynamics 365 Business Central with Continia Web Approval

This guide will focus on configuring Continia Web Approval for use with single sign-on together with Dynamics 365 Business Central (Cloud).

Register Application

First step is to register the Continia Web Approval portal as an Application in Azure Active Directory.

Open the Microsoft Azure portal (https://portal.azure.com) and search for Azure Active Directory.

Select App registrations in the left hand menu and the New registration in the top menu.

Enter a name for the app registration, leave the selection for account type on Accounts in this organizational directory only, and enter https://www.continiaonline.com as the redirect URI.

Click Register to save the app registration.

You will be taken to the app registration page. In here, select Authentication in the left hand menu.

Fill in https://www.continiaonline.com/Account/SSOCallback as an additional redirect URI. The URI are case sensitive.

Click Save to save the changes.

Select Certificates & secrets in the left-hand menu and click New client secret.

Enter a description text and select an expiry date of your choice. You will not be able to set an expiry date going longer than 24 months.

Click Add to create a client secret.

Copy the value of the client secret and keep it a safe place. When the page is closed, the secret will no longer be visible.

Select API permissions in the left hand menu and click Add a permission.

Select Microsoft APIs tab and click Dynamics 365 Business Central.

Select Delegated permissions, tick the field user_impersonation and click Add permissions.

You can grant admin consent to the permission changes, to avoid the consent screen being displayed to every user during their first login to the Web Approval portal, by clicking the Grant admin consent for [DIRECTORY NAME].

Go to Overview and copy the Application (client) ID to a safe place together with the client secret, created earlier in this guide.