Azure AD Integrated Login (Manual Process)

This article provides the steps to configure your Dynamics 365 portal to work with your customer’s or partner’s Azure AD without having to add them as guest users in your own Azure AD.

Suggest Edits

Pre-requisites

Performing this task will require the following:

  • Portal Owner Privileges
  • Azure Admin privileges on the tenant

Time required

This configuration process is expected to take 15 minutes

Additional Notes

If you configure a custom domain or change your portal Base URL, these steps will need to be re-run, specifically step #3

Procedure

  1. Login to Azure Portal using the Global administrator account and click on the 'Azure Active Directory' icon within the Azure Services section. In case you don’t find the 'Azure Active Directory' icon click on More Services.
  1. Click on 'App Registrations' on the left-hand navigation menu and then click the ‘+ New Registration’ button on the right-side pane

  1. Paste your Self-Service Portal URL:

    1. Name Value
      Dynamics Portal URL

  2. Copy the following values paste them into the Register Application Page and click 'Register':

    1. Name Value
      Name Dynamics 365 Portals (Customer Login)
      Supported Accont Types Accounts in any organizational directory (Any Microsoft Entra ID tenant - Multitenant)
      Redirect URL
  1. Within the newly created App click on the ‘Authentication’ menu on the left-hand side navigation. On the right-hand pane tick the below checkboxes and hit ‘Save’.
  1. Click on 'Overview' on the left-hand navigation menu and copy the 'Application (client) ID'
  1. Go back to your CRM and click on the 'App' beside Dynamics 365 at the top-left corner
  1. Click on 'Portal Management'
  1. On the left-handed menu click on 'Site Settings'

  1. Create the described records below by clicking on '+ New' located at the top-ribbon menu:

  2. After filling in the described information on the records, click 'Save & Close'. Repeat until you create all the records.

  3. Create the following list of records one by one:

    1. Name Value
      Authentication/OpenIdConnect/CustomerAzureAD/Authority https://login.windows.net/common
      Authentication/OpenIdConnect/CustomerAzureAD/Caption Customer Login
      Authentication/OpenIdConnect/CustomerAzureAD/ClientId [Use 'Application ID' noted in step 3]
      Authentication/OpenIdConnect/CustomerAzureAD/ExternalLogoutEnabled true
      Authentication/OpenIdConnect/CustomerAzureAD/IssuerFilter https://sts.windows.net/_/
      Authentication/OpenIdConnect/CustomerAzureAD/RedirectUri ['Redirect URL' from Step #3]
      Authentication/OpenIdConnect/CustomerAzureAD/ValidateIssuer false

  4. Modify the following values:

    1. Name Value
      Authentication/Registration/AzureADLoginEnabled false
      Authentication/Registration/LocalLoginEnabled false
      Authentication/Registration/OpenRegistrationEnabled false
      Authentication/Registration/LoginButtonAuthenticationType https://login.windows.net/common

  5. 📘

    Make sure all parameters are configured correctly. Otherwise this will cause Self-Service Portal Malfunctioning

👍

Your SSP Integrated login setup has been completed.

Updated about 2 months ago