How to authenticate Multi Server URLs Using one azure Application credentials. about php-crm-toolkit HOT 5 CLOSED

HI Ebrahem,

while it's possible to create a multi-tenant app registration in your tenant, to get access to Dataverse in a different tenant, a consent needs to be granted + app user created anyway so the process is pretty much the same.

Yes, of course you can automate creation of the app id and secret. See https://learn.microsoft.com/cli/azure/ad/sp how to create a service principal (that's the one you want) using Azure CLI.

If you want to complete the entire process including registering a user in Dataverse and assign roles then consider using PowerShell version https://learn.microsoft.com/powershell/azure/create-azure-service-principal-azureps together with https://github.com/seanmcne/Microsoft.Xrm.Data.PowerShell to manipulate Dataverse data.

(Note that you can create credentials but not retrieve them.)

Hope it helps
George

from php-crm-toolkit.

Hello @georged,

Thanks for the quick respond.

I will read the articles you mentioned but let me ask another question,
After I work on this process what is the expected data should i take from user ? just Server Url ?

from php-crm-toolkit.

For multi-tenant app registration? In theory, yes, but you still need a consent / registration from the tenant administrator.

from php-crm-toolkit.

Consent from client side, so he gotta approve first if i can access his data or not.
Is that what're saying @georged ?

from php-crm-toolkit.

Even before accessing the data...

https://learn.microsoft.com/azure/active-directory/develop/howto-convert-app-to-be-multi-tenant#understand-user-and-admin-consent-and-make-appropriate-code-changes

Accessing data in Dataverse is governed separately by app user roles.

from php-crm-toolkit.