This article describes how you can create an mscrm-addons.com Application User for your Dynamics 365 organization. Further on it shows how you can use this user to connect via AttachmentExtractor online service (App Access).
Please create your service via connection type Server2Server first. When this service is saved, you can change the connection profile to AppAccess. This article is valid for Dynamics 365 Online only!
Prerequisits:
AttachmentExtractor version at least 2020.114
MSCRMADDONScomGeneral-solution at least 2020.49
If you are not sure with which version you are working this article will help you.
Table of content:
- How to register and create the Application User
- How to connect AttachmentExtractor service via the App
- Troubleshooting
- How to check if the required Dynamics 365 Solution is installed
- How to get the required Dynamics 365 Solution
- What to do if you have installed the General Solution only and have no access to the settings area
- How to get the credentials for the Application User again
- What to do when no Azure Active Directory administrator account is available
.
1 How to register and create the Application User
After installing AttachmentExtractor, open your Dynamics 365 > Advanced Settings > Settings > “MSCRM-ADDONS”-area > AttachmentExtractor.
Figure 1: Installed AttachmentExtractor
In the loaded configuration page navigate to the “License Server”-tab and hit the [Enable App Access]–button as you can see in Figure 2.
Figure 2: Enable AppAccess
The mscrm-addons.com Application User-page opens. Now enter the ❶ e-mail address of your Dynamics 365 Administrator.
Now define which kind of Azure AD App you want to register:
A “Client/Secret”-based App (classic): It is connecting for Dynamics 365 only or
B “Certificate based”-App (NEW): This is for connecting to Dynamics 365 AND SharePoint.
Select the App you want to connect and hit the ❷ [Start]-button.
Figure 3: The Application User – Client/Secret or Certificate based decision page
To proceed you have to enter the credentials of an Azure Active Directory administrator account. This account has to be a Dynamics 365 administrator as well (A + B).
Please note: If the window does not open, you should check your popup blocker.
Figure 4: Register the mscrm-addons.com application
Grant permission to register the App (A + B). Please [Accept].
Figure 5: Permission request
This window shows that the enable process has been successful (A + B). To continue go back to the dialog.
This window shows that the enable process has been successful. To continue go back to the dialog.
Figure 6: Enable Process has been successful
Now hit the [Enable]-button to continue.
Figure 7: Application User – Enable
This overview with is shown (A + B).
❶ Username
❷ AzurAD Domain
❸ Security Token
Figure 8: New credentials for Client/Secret and Certificate based
Your AppAccess User whether for A “Client/Secret based App” or the B “Certificate based App” is created.
.
2 How to connect AttachmentExtractor service via the App
Create a new DocumentsCorePack online service or update an existing one as usual. More information can be found in the corresponding user guide.
Now open your Connection profile and please make the following settings:
Select your Connection type: App Access (A + B)
Now use the generated credentials to continue with your connection via the App.
.
A: “Client/Secret”- based App:
❶ Username
❷ AzureAD Domain
❸ Security Token
Please note: Fill in all the generated credentials as you can see in Figure 9. In some circumstances the AzureAD Domain does not appear. Hit the ❹ [Retrieve Organizations]–button.
Figure 9: Create Connection profile for Client/Secret based app
.
B: “Certificate”- based App:
❶ Username
❷ AzureAD Domain
❸ Security Token
❹ Certificate Based
Please note: Fill in all the generated credentials as you can see in Figure 10. In some circumstances the AzureAD Domain does not appear. Hit the ❺ [Retrieve Organizations]–button.
Figure 10: Create Connection profile for Certificate based app
Hit the ❺ [Retrieve Organizations]–button and enter your ❻ SharePoint Username and ❼ setup the connection.
Figure 11: Setup SharePoint connection
When your AppAccess authentication to SharePoint was successful, this Info is shown (B).
Figure 11: Info
Now click on the [Verify Connection & Save Profile]-button and your service will be updated. Please do not close this window or navigate away! This is a good time for a coffee break (A + B).
Figure 12: Verify connectivity and permissions
.
3 Troubleshooting
.
How to check if the required Dynamics 365 Solution is installed
Make sure that you have the required “MSCRMADDONScomGeneral” solution installed.
Therefore, open Dynamics 365 > Advanced Settings > Settings > Solutions.
Figure 12: Solutions in Dynamics 365
Check if a solution named “MSCRMADDONScomGeneral” exists and if its version is 2020.49.
Figure 13: MSCRMADDONScomGeneral solution
Please note: If the solution does exist and if its version is up to date, you can skip the next section.
.
How to get the required Dynamics 365 Solution
If like in Figure 13 the version is to old, you can download the solution file here. After the download, hit the [Import]-button, select the downloaded .zip file (MSCRMADDONScomGeneral.zip) and follow the dialog.
Figure 14: Select solution package dialog
.
What to do if you have installed the General Solution only and have not access to the settings area
Open the “CreateAppUser.html”-web resource by replacing the “[Dynamics365ServerURL]” placeholder of the following link with YOUR Dynamics 365 server URL:
[Dynamics365ServerURL]/webresources/ptm_general/applicationuser/CreateAppUser.html]
It should look like this:
https://crm875916.crm.dynamics.com/webresources/ptm_general/applicationuser/CreateAppUser.html
This will open the “mscrm-addons.com Application User” – configuration.
.
How to get the credentials for the Application User again
Just navigate in your Dynamics 365 to AttachmentExtractor, click on the License-tab and then the [App Access Info].
Here is the direct link again to get to this site:
[Dynamics365ServerURL]/webresources/ptm_general/applicationuser/CreateAppUser.html
e.g., https://crm875916.crm.dynamics.com/webresources/ptm_general/applicationuser/CreateAppUser.html
Figure 15: Dynamics 365 > AttachmentExtractor > AppAccess Info
The “mscrm-addons.com Application User”-overview opens.
Please note: In this example both options are installed, and you have an overview via the drop-down menu.
Figure 16: mscrm-addons.com Application User – overview
Please note: Admin user rights are requested! If the current user does not have this privilege, the page will show an error:
Figure 17: Error without minimum permission
.
What to do when no Azure Active Directory administrator account is available
If you do not have an Azure Active Directory administrator account available, you can use this URL and ask your admin to consent. Once done, repeat the steps.
A: For Client/Secret based:
https://login.microsoftonline.com/[AAD TenantId]/adminconsent?client_id=aa3c57aa-ce9d-4140-90bf-1c1235dafc54&state=appuser&redirect_uri=https://graphapi.mscrm-addons.com
B: For Certificate based:
https://login.microsoftonline.com/[AAD TenantId]/adminconsent?client_id=7b92eea5-1022-406b-b750-3325713c916e&state=appuser&redirect_uri=https://graphapi.mscrm-addons.com
Your Administrator only has to replace the placeholder [AAD TenantId] with the actual ID of your AAD Tenant or with the domain name of the tenant. Once done, you will be redirected to our the mscrm-addons.com website and if this page shows “The enable process has been successful”, go back to the AttachmentExtractor dialog.
Please note: You can find all the relevant information here.
Figure 18: AAD TenantId = Directory ID
That’s it! We appreciate your feedback! Please share your thoughts by sending an email to support@mscrm-addons.com.