Creating an App Registration in Azure
The following steps need to be completed to create an App Registration in Document Inbound. An App Registration is required by Document Inbound, to be able to use all of the features that are available in Document Inbound.
Info
To perform this setup, it is necessary for the administrator account to be present in both Business Central and Azure Portal as only administrators have the necessary privileges.
Business Central (SaaS)
- Navigate to Document Inbound - Module Setup.
- Click on the Create Registration action in the Document Inbound - Module Setup to proceed.
- If a pop-up to sign in appears, make sure to sign in with an administrator account in both Document Inbound and Azure to continue with the creation of the App Registration.
- Once the App Registration is created, a new user named Document Inbound will be automatically generated for the Azure Active Directory Application. A pop-up will guide you to the Azure Active Directory Application page where you can click on the Grant Consent action button to provide administrator consent and permissions in Azure.
- The App Registration field group in the Document Inbound - Module Setup should now be complete, and an App Registration named Document Inbound will have been created in your Azure Portal App Registrations.
Business Central (On-Premise)
Creating the App Registration automatically from Business Central On-Premise is not feasible. Therefore, the creation of the App Registration needs to be done manually through the Azure Portal.
Creating the Azure App Registration in Azure Portal
The following steps will guide you on how to create a new App Registration for Document Inbound in Azure Portal.
- Log in to the Azure Portal at Azure Portal.
- Click on the Azure Active Directory icon in the left-hand navigation menu.
- In the Azure Active Directory menu, click on App Registrations.
- Click the New registration button.
- Enter the name Document Inbound in the Name field.
- Choose the appropriate Supported account types option for the app registration.
- Enter the appropriate Redirect URI for your app registration. This is the URI that Azure AD will redirect the user to after authentication. The URI should be set to Web for the platform and written in the following format https://**external Business Central address/BC/OAuthLanding.htm**.
- Click the Register button to create the app registration.
- On the app registration page, note the Application (client) ID and Directory (tenant) ID. This is the unique identifier for your app registration that you will need to use when configuring your Document Inbound in Business Central.
- Under the Certificates & secrets tab, click New client secret to create a new secret that will be used to authenticate your app with Azure AD.
- Enter a description for the secret, select an expiration date, and click Add.
- Note the generated secret value, as it will only be displayed once and cannot be retrieved later. Please take a note of the secret value as it is needed to configure Document Inbound in Business Central.
-
Under the API permissions tab, click Add a permission and add the following permissions.
Permission group API / Permission name Type Description Microsoft Graph
Directory.Read.All
Application Read directory data Microsoft Graph
Group.ReadWrite.All
Application Read and write all groups Microsoft Graph
Mail.ReadBasic.All
Application Read basic mail in all mailboxes Microsoft Graph
Mail.ReadWrite
Application Read and write mail in all mailboxes Microsoft Graph
User.Read
Delegated Sign in and read user profile Microsoft Graph
User.Read.All
Application Read all users' profiles -
Click the Grant admin consent button to grant the permission an admin consent.
Entering the Azure App Registration information in Business Central
The following steps will guide you on how to configure the App Registration for Document Inbound through the App Registration Wizard.
- Navigate to Document Inbound - Module Setup.
- Click on the Configure App Registration action in the Document Inbound - Module Setup to proceed.
- An App Registration Wizard will appear. Click on Begin to start the configuration.
- To continue this step, it is necessary to already have an App Registration prepared for Document Inbound. If you have not created an App Registration for Document Inbound, please refer to the Creating the Azure App Registration in Azure Portal section.
- Fill the App Registration Name, Client ID, Client Secret, Tenant ID, and Redirect URL fields.
- Once all fields are filled correctly, click on Next to proceed with the configuration.
- Upon clicking Finish the changes will be applied to the App Registration settings in Document Inbound.
Warning
- If the App Registration is not configured correctly, the Document Inbound will not be able to function properly in some area.
- Existing App Registration will be overwritten upon finishing the App Registration Wizard.