In this article

Overview

Snaps in this Snap Pack use the Azure the Azure portal for OAuth2 account to access the Dynamics 365 for Sales. For the OAuth2 account to function without any issue, ensure to (create and) authorize successfully, create, and configure an application corresponding to the account as explained in shown in the steps below. These steps also contain the information required to create/define a new OAuth2 account for use with this Snap Pack.

Create/Access your Azure Portal Application

1. Log into the Microsoft Azure Portal.
2. To create a new application, click Azure Active Directory under Azure Services.
3. Click App Registrations under  Create.
4. Enter the Name and Redirect URI for the new app registration. Redirect URI is the URL of your SnapLogic server that uses this account.
   OR 
   To use an existing application, select the application from the list in the App Registrations to select the application.
5. Click Register.
   Image Removed
   

Locate/Define Information Required to Create your Snap Account

...

workflow.

...

Prerequisites

An Azure account with a free subscription to create the application.

Key Steps in the Workflow

Create an Application in the Azure Portal

1. Log in to the Microsoft Azure Portal.

2. Navigate to Azure services > Microsoft Entra ID.

3. Navigate to Add > App registration.

4. On the Register an application page, specify the name for registering the application and click Register. Learn more about creating an application at Quickstart: Register an app in the Microsoft identity platform - Microsoft Entra.

Define Permissions

13. Under Microsoft Graph, select Delegated permissions and choose the following permissions from the respective category. 

1. OpenId permissions > offline_access

2. Files > Files.ReadWrite.All

14. Click API permissionsto grant permissions to the application for the endpoint in context

...

1. On the left navigation panel, navigate to Manage,select API permissions > Add a permission.
   

   Image Added

2. On the Request API permissions window, select Microsoft Graph > Application permissions for the OAuth2 Application Account.
   

   Image Added

3. Select the permissions from Files, Users, and Teams. Choose the minimum API permissions listed under Scopes and Permissions Required for Dynamics 365 for Sales.
   

4. Click Add Permissions. View all the permissions added under Configured permissions.
   

   Image Added

   Image Added

    

5. Click Grant admin consent confirmation and select Yes.
   

   Image Added

6. Click Overview and select Add a Redirect URI. You will be redirected to the Platform Configurations page. 
   

   Image Added

   1. Under Platform configurations, click Add a platform.

   2. Select Web and specify either of the following Redirect URIs based on the region your server is located:
      https://elastic.snaplogic.com/api/1/rest/admin/oauth2callback/rest
      

...

Under Manage, click API permissions to grant permissions to the application for the endpoint in context.

...

Click Grant admin consent for SnapLogic in the Configured permissions screen to allow token generation in your Snap Pack without the need to specify client credentials each time.

...

Click Add permissions to add permissions. 
Image Removed

1. 1. https://emea.snaplogic.com/api/1/rest/admin/oauth2callback/rest

   2. Click Configure. A popup message displays indicating that the application is successfully updated.

      Image Added

2. On the Platform configurations page, click Save. The Redirect URIs are added the the application.
   

   Image Added

    

Locate the Application Credentials in the Azure Portal

To authorize your account in SnapLogic, you must have the following application credentials:

• Application (Client) ID

• Directory (Tenant) ID

• Client secret value

1. On the application page, under Essentials, note the Application (client) ID and Directory (tenant) ID needed for the Snap account.
   

   Image Added

2. In the left navigation panel, select Manage > Certificates & secrets.

3. On the Certificates & secrets page, click + New client secret.

4. In the Add a client secret window, enter the Description, select an option for Expires from the dropdown list, and click Add. 

   The Client secret value and ID are generated. This value and the ID are required to configure the OAuth2 account.
   

   Image Added

Scopes and Permissions Required for Dynamics 365 for Sales

Specify the Credentials And Validate the Snap account

1. Navigate to the Snap of your choice and

...

1. configure the OAuth2 account with the

...

• Client ID
• Client Secret
• OAuth2 Endpoint and OAuth2 Token:
  • OAuth2 Endpoint:https://login.microsoftonline.com/%3Ctenantname%3E.onmicrosoft.com/oauth2/v2.0/authorize
  • OAuth2 Token: https://login.microsoftonline.com/<tenantname>.onmicrosoft.com/oauth2/v2.0/token
  Replace <tenantname> with your Azure Active Directory tenant name. 
• Token Endpoint Config:
  • Token endpoint parameter: response_type
  • The token endpoint parameter value: code
  • Auth Endpoint configuration:
    • Authentication parameter: scope
    • Authentication parameter value: offline_access Files.ReadWrite.All

...

See Also

...

1. details from the Azure portal's registered application. Refer to Dynamics Directory OAuth2 account

2. Select the Auto-refresh token checkbox in the account settings and click Apply.

3. Click Authorize. The Access and Refresh tokens are generated. You will be redirected to the sign-in page of the Azure Portal.

4. Sign in to Azure Portal with valid credentials to redirect to the Snap Edit account settings dialog. The Access and Refresh tokens are autopopulated but encrypted in the Account settings.

5. Validate the Snap Account.

Troubleshooting

Frequently Asked Questions