How to: Set Up Delegation on the Microsoft Dynamics NAV Portal Framework

  • Article

When SharePoint Server and Microsoft Dynamics NAV Server are on separate computers, you must configure delegation between the computers. Delegation is when a front-end service forwards a client request to a back-end service so that the back-end service can also impersonate the client. Impersonation is typically used to check whether a client is authorized to perform a particular action, and delegation is a way of flowing impersonation capabilities, together with the client’s identity, to a back-end service.

Configuring delegation means explicitly configuring the Microsoft Dynamics NAV Server service to delegate its access to the database server on behalf of Microsoft Dynamics NAV Portal. To make the access more secure, you specify delegation to a specific service on a specific server.

Note

To complete the procedure in this topic, you must be a domain administrator.

To set up delegation on the Microsoft Dynamics NAV Server from the SharePoint Server

  1. On any server computer in the domain, choose Start, and then choose Run.

  2. In the Open field, type dsa.msc.

    This opens the Active Directory Users and Computers utility.

  3. In the navigation pane on the left, expand the node for the domain where you have installed the Microsoft Dynamics NAV environment.

  4. To configure delegation, the functional level for the domain must be Windows Server 2008 or Windows Server 2008 R2. To verify the domain functional level, right-click the node for the domain where you have installed Microsoft Dynamics NAV, and then on the shortcut menu, choose Raise Domain Functional Level. If the level is not Windows Server 2008 or Windows Server 2008 R2, then raise it to that level.

  5. Expand the Computers node, right-click the computer that is running Microsoft Dynamics NAV Portal Framework for Microsoft SharePoint 2010, and then choose Properties.

  6. On the Delegation tab, choose Trust this user for delegation to specified services only, and then choose Use Kerberos only.

    You must add the following services for the computer that is running Microsoft Dynamics NAV Server as described in the following table.

    Service type User or computer Port

    DynamicsNAV

    NAVSERVER

    7046

    Host

    NAVSERVER

    NAVSERVER is the name of the computer that is running Microsoft Dynamics NAV Server.

  7. To add the services, choose Add.

  8. In the Add Services window, choose Users or Computers.

  9. In the Enter the object names to select box, type the name of the Microsoft Dynamics NAV Server computer, and then choose the OK button.

  10. In the list of available services, press and hold the Ctrl key, select DynamicsNAV for port number of the Microsoft Dynamics NAV Server and HOST, and then choose the OK button.

  11. Choose the OK button to close the dialog box.

See Also

Tasks

How to: Install Microsoft Dynamics NAV Portal Framework
Walkthrough: Installing the Microsoft NAV Portal Framework Tiers on Multiple Computers

Concepts

Deploying Microsoft Dynamics NAV Portal Framework