OAuth with Azure Active Directory for Dynamics CRM oauth-with-azure-active-directory-for-dynamics-crm

Sign in to your Azure Portal.

Choose the Azure AD tenant by clicking your account in the top-right corner of the page, followed by clicking the Switch Directory navigation and then selecting the appropriate tenant. Skip this step if you only have one Azure AD tenant under your account or if you’ve already selected the appropriate Azure AD tenant.

Search for “Azure Active Directory” in the search bar and click the name to open.

Click App Registrations in the left-hand menu.

Click New Registration at the top.

Follow the prompts and create an application. It doesn’t matter if it’s a web application or a public client (mobile & desktop) application, but if you’d like specific examples for web applications or public client applications, check out the quickstarts.
a. Name is the application name and describes your application to end users.
b. Under Supported account types, select Accounts in any organizational directory and personal Microsoft accounts.
c. Provide the Redirect URI. For Web Applications, this is the base URL of your app where users can sign in. For example, http://localhost:12345. For public clients (mobile & desktop), Azure AD uses it to return token responses. Enter a value specific to your application. For example, http://MyFirstAADApp.

Once you’ve completed registration, Azure AD assigns your application a unique client identifier (the Application ID). You need this value in the next section, so copy it from the application page.

To find your application in the Azure portal, click App Registrations, then click All Applications. Open your newly created application

Click Authentication in the left-hand menu.

Add the Marketo Measure redirect URLs: https://apps.bizible.com/OAuth2 and https://apps.bizible.com/OAuth2?identityOnly=true to the list of Redirect URLs.

Navigate to the API Permissions tab and make sure that the correct permissions are assigned to the application.

From here, enter “enterprise” in the search box and click Enterprise Applications.

Again, find and open your new application from the list of applications.

From the Permissions tab, click Grant Admin Consent for (instance name).

Click Accept.

From the “Users and Groups” tab, make sure that the valid “Users and Groups” are assigned to the Application.

Navigate to your Common Data Service environment (https://[org].crm.dynamics.com).

Navigate to  Settings  >  Security  >  Users.

Choose  Application Users  in the view filter.

Select  + New.

In the Application User form, enter the required information.

If the setup is correct, then after selecting  Save, the  Application ID URI  and  Azure AD Object Id  fields will auto-populate with correct values.

Before exiting the user form, choose  Manage Roles  and assign a security role to this application user so that the application user can access the desired organization data.

When setting up your Dynamics connection for the first time, follow steps 1-5 of the “CRM as a Data Provider” section in this article.

When prompted for OAuth credentials, fill in the Client Id, Client Secret, and Application Id URI that were set up in the section above.

When you are in the Marketo Measure application, go to My Settings > Settings > Connections.

Click the key icon in the CRM section next to the Dynamics connection.

When the key is clicked, a pop-up appears and you are prompted to enter the Client ID, Client Secret, and Application ID URI, similar to the signup flow.

After you click Submit, you will be prompted to sign in with Azure Active Directory. When the authentication is successful, your Dynamics account is reauthorized within Marketo Measure.