Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

  1. Log in to the Microsoft Azure Portal.

  2. Navigate to Azure services > Azure Active DirectoryMicrosoft Entra ID.

  3. Navigate to Add > App registration.

  4. On the Register an application page, specify the name for registering the application and click Register. Learn more about creating an application at Quickstart: Register an app in the Microsoft identity platform - Microsoft Entra.

...

  1. On the left navigation panel, navigate to Manage,select API permissions > Add a permission.

  2. On the Request API permissions window, select Microsoft Graph > Application permissions for the OAuth2 Application Account.

    Image RemovedImage Added

  3. Select the permissions from Files, Users, and Teams. Choose the minimum API permissions listed under Scopes and Permissions Required for Dynamics 365 for Sales.

  4. Click Add Permissions. View all the permissions added under Configured permissions.

     

  5. Click Grant admin consent confirmation and select Yes.

  6. Click Overview and select Add a Redirect URI. You will be redirected to the Platform Configurations page. 

    1. Under Platform configurations, click Add a platform.

    2. Select Web and specify a valid Redirect URI either of the following Redirect URIs based on the region your server is located:
      https://elastic.snaplogic.com/api/1/rest/admin/oauth2callback/rest and click 
      https://emea.snaplogic.com/api/1/rest/admin/oauth2callback/rest

    3. Click Configure. A popup message displays indicating that the application is successfully updated.

  7. On the Platform configurations page, click Save. The Redirect URIs are added the the application.

     

Locate the Application Credentials in the Azure Portal

...

Scopes and Permissions Required for Dynamics 365 for Sales

Application permissions

Permission

Display String

Description

Admin Consent Required?

user. impersonation

user_impersonation

Allows
you to temporarily sign in as a different user in your network.

No

User.Read.All

User.Read.All

Allows the app to read the full set of profile properties, reports, and managers of other users in your organization, on behalf of the signed-in user.

Yes

Specify the Credentials And Validate the Snap account

...

If you select the Auto-refresh token checkbox, then you must provide offline_access as the Scope in the Token end point configuration.

Troubleshooting

Common Errors

Reason

Response

Error 401

Token is invalid

Provide a valid token and reauthorize the account.

The redirect URI specified does not match the reply URI configured for the application.

Incorrect redirect URI specified by user.

Add the following redirect_uri:
https://elastic.snaplogic.com/api/1/rest/admin/oauth2callback/rest

URL error when invoking the operation

Ensure the tenant domain name is correct.

Ensure that Directory (tenant) ID noted from the application is in the correct format.

Example: 2060aafa-89d9-423d-9514-eac46338ec05

Frequently Asked Questions

...