Dynamics CRM authentication through web application - rest

We try to get data from CRM Dynamics on premise from a web application. We have a specific AD account that can be used to get datas from the CRM.
We registered the application in ADFS to get a client ID. We tried to authenticate using the client ID and login/password of dedicated user. But no luck.
There is a lot of documentation available for this type of requests but all for Dynamics online. I could read some tutorials but no one could help us reach the goal.

Related

Add domain to Business Manager using Facebook Business Manager API

I'm currently using the Facebook Business Manager API to automatically create new Child Business Managers using the 2-tier Business Manager solution.
https://developers.facebook.com/docs/marketing-api/2tier-bm-solution
The only steps I am unable to find documentation for are adding a domain and exporting the DNS txt record for verification. https://developers.facebook.com/docs/sharing/domain-verification/verifying-your-domain/
Has anyone accomplished this using the API?
Confirmed by Facebook Engineering support that this endpoint doesn't exist (yet).

Query Data on Microsoft Dynamics using SOAPUI / POSTMAN

I am trying to play around using basic queries but I am unable to retrieve anything from my trial dynamics account
I cannot find any tutorials/ EXAMPLES queries to try out...
I have consulted the MS DYNAMICS Web API documentation but it doesn't give examples on how to use it just lists of the metadata one can use.
This is the screen I get after I import the WSDL to soapui
Assuming, you are using Dynamics 365 i.e Online version of CRM.
Login with Admin account or account which has System admin roles.
Assuming you are on Model driven app screen (i.e new UI)
Go to Advanced setting.
Then Setting--> Customizations
Then Developer Resource
and there you can find Instance WebAPI, that is your Org (instance) WebAPI URL
Basically WebAPI url is below, try that in browser
https://[Organization URI]/api/data/v9.1/
Once you get the Response
you can play around with it as
https://[Organization URI]/api/data/v9.1/contacts/
and then you can also try as
https://[Organization URI]/api/data/v9.1/contacts/?$select=fullname,annualincome,jobtitle,contactid

Which options of authentication in Office 365 should I use to access user email?

This is my first time working with Office 365 APIs. What we wanted to achieve is to retrieve users email from Office 365 and display the content in our Java Web Application.
Few thinks I looked through:
It is recommended not to use basic authentication but rather OAuth or OpenId
Rest API is the standard.
Should we register our application in to Azure AD ? Do we have to use for every new user or is it only a one time setup ?
I would really appreciate it if you point me to any sample source code to refer too. Feel free to suggest me any recommendations.
Should we register our application in to Azure AD ? Do we have to use for every new user or is it only a one time setup ?
Yes you must register your application to use OAuth, which is required by the REST API. I recommend you register in the Application Registration Portal at http://apps.dev.microsoft.com/. You can login to the ARP with an Office 365 account OR a Microsoft account. This allows you to use the Azure "v2" OAuth model, and to access Outlook.com accounts in addition to Office 365.
Registration is a one-time thing, assuming you want to make your web application multi-tenant.
There's a walkthrough for Java/Spring web app here: https://dev.outlook.com/restapi/tutorial/java
Finished source code here: https://github.com/jasonjoh/java-tutorial

Authenticating Dynamics CRM Online with Facebook Login

I am using Microsoft Dynamics CRM Online and I want my users to be able to log in using Facebook Login. I imagine the user going to the website. If the user's already authenticated with Facebook, he gets access to the CRM system. If not, he will be redericted to a Facebook login box. He would have to authenticate with Facebook to get access to the CRM Online instance.
I guess, I would need to set up an ACS to do this. What else would I need?
Which components would I need to set up and how would they all work together?
I was not able to find any documentation about this topic.
Thank you!
You will need to properly authenticate the user(Valid Office365 User) on the portal.office.com before proceeding to CRM ... that's the way it is built, I guess you will not have a way to escape it.
There are multiple Microsoft Dynamics CRM Online identity providers that must be accounted for when you develop an application that connects to the Organization or Discovery web services. These providers can be identified as managed domain, federated, and Microsoft account. This topic focuses on Microsoft Dynamics CRM Online web service authentication with managed domain and federated identity providers, although the same classes and code shown here also work with all supported identity providers and Microsoft Dynamics CRM deployment types.
Here is some more details about it :
https://msdn.microsoft.com/en-us/library/hh670628.aspx

How to create a new SP connection in PingFederate?

We are using PingFederate to enable SSO. It's being mapped with the LDAP directory server and our site is able to use SSO. Now we are integrating a helpdesk software application which is being hosted somewhere within our own site. We want the help desk user to be able to login using our site credentials. For that I need to add the help desk as a partner (SP) in PingFederate acting as an IdP.
How can I achieve this? A brief explanation would be helpful. Thanks in advance.
You may want to check out the Getting Started - Part 3 recording from our website. It demonstrates how the setup a connection to a typical service provider.
https://www.pingidentity.com/support/training-center/index.cfm/103-creating-a-connection?id=1011570451001
In a nutshell, you would need communicate with your partner about federation and share some information like:
Federation Standard/Protocol,
Base URL, Entity ID, Endpoints,
Binding,
SSO profile,
Attributes,
and so on.
All of the above depends on what federation server your partner is using. Once you have all the information you can quickly setup the connection to your partner within PingFederate.
I hope this helps. I've also sent you a PM.
There's lots of good information in our documentation on managing SP connections: https://support.pingidentity.com/s/document-item?bundleId=pingfederate-92&topicId=adminGuide%2FmanagingSpConnections.html
How the connection is made largely depends on how you authenticate users, what attributes you're sending, and what the SAML capabilities/details are of your help desk software. If no SAML features are available, you may have to use one of our Integrations to either front end it (with a web server plugin, like Apache or IIS) or modify the app (using one of our language kits or agentless integration approach).
You may also want to consider sitting in one of our training sessions on PingFederate basics: https://www.pingidentity.com/en/resources/training.html
Should all else fail, our support centre is there to help if you have a valid contract.