Authenticating with Microsoft Entra ID
Microsoft Entra ID authentication for Business Central on-premises. It covers the available protocols (OpenID Connect and WS-Federation), how to configure each, and how they relate across versions. Use it to choose a method, set up single sign-on, or plan a migration.
Path: Business Central on-premises > Administration > Configuring user authentication > Authenticating with Microsoft Entra ID · tier official · system administration · narrative reviewed (checked by Opus)
Overview
This section explains how Business Central on-premises users can sign in through Microsoft Entra ID. It starts with an overview page that compares the two protocols, OpenID Connect and WS-Federation, and describes migration paths. It also notes the effect on Excel add-in, Power BI, Outlook add-in and service-to-service scenarios.
Two configuration pages follow. One covers OpenID Connect setup, which includes the Entra tenant, application, security certificates, single sign-on, multitenant deployment and OData web services. The other covers WS-Federation, which applies to version 21 and earlier and is replaced by OpenID Connect in version 22 and later.
Start with the overview page to choose a protocol for your version. Then follow the matching configuration page.
Key points
- Two protocols are described: OpenID Connect and WS-Federation.
- WS-Federation applies to version 21 and earlier and is replaced by OpenID Connect in version 22 and later.
- The OpenID Connect page covers versions 20 to 22 and the 2022 release wave 1.
- OpenID Connect setup involves the Entra tenant and application, security certificates, single sign-on, multitenant deployment and OData web services.
- WS-Federation setup steps: create an Entra tenant, register an application, associate users, configure the server instance, then set up web clients and tenants.
- WS-Federation setup also covers web service accounts.
- The overview covers migration paths and effects on Excel, Power BI, Outlook add-in and service-to-service authentication.
Learn pages
- Authenticating Business Central Users with Microsoft Entra ID: Get an overview about using Microsoft Entra authentication in Business Central.
- Configure Microsoft Entra authentication with OpenID Connect: Learn how to authentication Business Central users by using Microsoft Entra ID with OpenID Connect.
- User Authentication with Microsoft Entra ID for Single Sign-on: Associate an existing Microsoft account with user account to achieve single sign-on between the Web client and Microsoft 365.
Source: Microsoft Learn (CC BY 4.0). Descriptions are Learn’s own.