Knowledge Base - Smart Flows
Knowledge Base - Smart Flows
Breadcrumbs

Create an EntraID Application Registration for Experlogix Smart Flows in Microsoft Azure

Prerequisites

Before you start, ensure you have:

  • Access to the Azure portal.

  • Permissions to create app registrations, typically Application Administrator or Global Administrator.

  • The Smart Flows redirect URI, available through the application.properties file.

  • A Dynamics 365 CE or Dataverse environment using Microsoft Entra ID authentication.

Step 1 – Open App registrations

  1. Sign in to the Azure portal.

  2. Navigate to Microsoft Entra ID > App registrations > New registration.

    microsoft-entra-dynamics-1.png

Step 2 – Register the Smart Flows application

  1. Enter a Name.

  2. Choose Supported account types:

    • Typically: Accounts in this organizational directory only (Single tenant)

  3. Under Redirect URI:

    • Platform: Web

    • URI: Enter the exact redirect URI. The redirect URL should be "<project.baseurl>/oauth2/redirect" where "<project.baseurl>" is the location where Experlogix Smart Flows is available as set in the 'application.properties'. For example:"https://yourproject.smartflows.xpertdoc.com/oauth2/redirect".

  4. Select Register.

    microsoft-entra-dynamics-2.png

Step 3 – Copy the Client ID

After registration, you are taken to the app Overview page.

  1. Copy the value of Application (client) ID.

    microsoft-entra-dynamics-3.png

  2. This value will later be stored in Smart Flows as the Client ID application property.

Step 4 – Create a Client Secret

  1. Navigate to Certificates & secrets.

    microsoft-entra-dynamics-3.png

  2. Under Client secrets, select New client secret.

    microsoft-entra-dynamics-4.png

  3. Enter:

    1. Description (for example: Smart Flows OAuth Secret)

    2. Expiration (choose according to your security policy)

  4. Select Add.

    microsoft-entra-dynamics-6.png

  5. Immediately copy the secret value.

This value is shown only once and cannot be retrieved later.

microsoft-entra-dynamics-7.png

Step 5 – Configure API permissions

  1. Navigate to API permissions.

  2. Select Add a permission.

    microsoft-entra-dynamics-8.png

  3. Select Dynamics CRM (for Dynamics 365 CE) or the appropriate Dataverse API.

    microsoft-entra-dynamics-9.png

  4. Choose Delegated permissions.

    microsoft-entra-dynamics-10.png

  5. Add the required permission: user_impersonation.

    microsoft-entra-dynamics-11.png

  6. Select Microsoft Graph.

    microsoft-entra-dynamics-12.png

  7. Choose Delegated permissions.

  8. Under Users, add the required permission: user_read.

  9. Select Grant admin consent for the tenant.

About the required API permissions

Dynamics CRM > user_impersonation - The app can make API calls to Dynamics 365 using the identity and permissions of the currently signed-in user. This will be the connector user when setting up the CE connector is Smart Flows. All operations are performed with the user's security context - respecting their role-based permissions in Dynamics. Privileges cannot be elevated so Smart Flows cannot do more than what the signed-in user can normally do and field-level security, business unit access, and role permissions are all enforced.

Microsoft Graph > user.read - The app has basic profile access (read the user's display name, email, user principal name, job title, and other basic profile properties). It can only access information about the currently signed-in user (not other users). This permission is commonly considered a basic, low-risk permission.

Step 6 – Store the values in Smart Flows

  1. In the Experlogix Smart Flows application.properties file create the following properties:

    • dynamics.clientid- Paste the Application (client) ID from Step 3.

    • dynamics.clientsecret - Paste the Secret value from Step 4.

      Example:

      • dynamics.clientid=c8ef4bdb-4e17-4b9e-a48b-a698629a383d

      • dynamics.clientsecret=qXY]V.PE/n2e2lu4Z_GCdHGq4i7/tofQ

  2. Save the application.properties file.

    Your Experlogix Smart Flows environment is now ready to configure a Microsoft Dynamics 365 CE Online connector using OAuth via EntraID.