Walkthrough: Update a service endpoint from ACS to SAS authorization

  • Article

 

Applies To: Dynamics 365 (online), Dynamics 365 (on-premises), Dynamics CRM 2016, Dynamics CRM Online

Shared Access Signature (SAS) is the recommended authorization method for the Dynamics 365 and Azure integration as its use results in improved authorization performance compared to Access Control Service (ACS), and SAS is supported on all Dynamics 365 deployments without any special server configuration. You can update existing service endpoint entity records in a Microsoft Dynamics 365 organization from ACS to SAS authorization by using the Plug-in Registration Tool and following these steps.

Note

This feature was introduced in CRM Online 2016 Update 1 and CRM 2016 Service Pack 1 (on-premises). The Plug-in Registration Tool from the v8.1 or later Dynamics 365 SDK includes SAS support.

Step 1: Update the messaging entity

You'll need to update your Microsoft Azure messaging entity that was configured for ACS authorization, for example a queue or topic, to be properly configured for SAS. This is simple to do as you just need to add a SAS shared access policy.

Perform the update

  1. Sign in to the AzureClassic portal.

  2. Navigate to the messaging entity that you plan to update.

  3. Select the entity and then select CONFIGURE.

  4. Create a shared access policy and specify Send permission at a minimum. Listen permission is required for a two-way endpoint contract.

  5. Verify the messaging entity's SAS connection information. It should have a connection string.

Step 2: Update the service endpoint

Now go ahead an update the service endpoint entity record in your Dynamics 365 organization with the SAS information of your messaging entity.

Perform the update

  1. Run the Plug-in Registration Tool and sign in to the Dynamics 365 organization containing the service endpoint.

  2. Select the service endpoint and then select Update.

  3. Enter a value for the SAS Key Name and the SAS Key. These are obtained from the messaging entity's connection string that is available in the Azure management portal. Look for SharedAccessKeyName and SharedAccessKey values in the connection string.

  4. Select Save.

See Also

Azure extensions for Microsoft Dynamics 365
Azure integration with Microsoft Dynamics 365
Walkthrough: Configure Microsoft Azure (ACS) for integration with Dynamics 365

Microsoft Dynamics 365

© 2016 Microsoft. All rights reserved. Copyright