Password Synchronization with Microsoft Dynamics CRM

ADSelfService Plus’ real-time password synchronizer ensures that users maintain a single password across different applications, reducing password-related issues. Each time a user resets or changes their Active Directory password, the new password is automatically synced with their Microsoft Dynamics CRM account.

Microsoft Dynamics CRM can be configured with ADSelfService Plus for password synchronization by using either the Dynamics CRM admin's credentials to authorize password synchronization for Azure user accounts (Password Authentication) or by creating an application in Azure and permitting password synchronization using OAuth (OAuth Client Credentials).

Important: Install the Password Sync Agent to synchronize password changes and resets not initiated using ADSelfService Plus.

It is strongly recommended to use OAuth Client Credentials to configure password synchronization for Microsoft Dynamics CRM.

Steps to configure Microsoft Dynamics CRM accounts with ADSelfService Plus

Prerequisites

If you are using OAuth Client Credentials

You will need to register a new Azure application for ADSelfService Plus by following these steps:

  1. Log into portal.azure.com with your Azure administrator credentials.
  2. Under Azure services, click Microsoft Entra ID. In the left pane, navigate to Manage > App registrations > New registration.
  3. Password Synchronization with Microsoft Dynamics CRM
  4. Provide a Name of your choice and select Accounts in this organizational directory only as the Supported Account Types.
  5. If auto-linking has been disabled in ADSelfService Plus, select Web as the platform and paste the appropriate Redirect URI according to the protocol used by ADSelfService Plus:
  6. If HTTP is enabled in ADSelfService Plus: https://identitymanager.manageengine.com/api/public/v1/oauth/redirect
  7. If HTTPS is enabled in ADSelfService Plus: https://<productAccessUrl>/LinkAccountCallback
  8. Click Register.
  9. Password Synchronization with Microsoft Dynamics CRM
  10. In the Overview page that appears, you will find the application details. Copy the Client ID and Tenant ID, which will be used during configuration in ADSelfService Plus.
  11. Password Synchronization with Microsoft Dynamics CRM
  12. From the left pane of the registered application page, navigate to Certificates & secrets and click New client secret.
  13. Password Synchronization with Microsoft Dynamics CRM
  14. Provide a Description for the client secret, and in the Expires field, specify the validity period for the client secret. Click Add.
  15. Password Synchronization with Microsoft Dynamics CRM
  16. The client secret will be generated. Copy the string displayed under Value which will be used later for configuration in ADSelfService Plus.
  17. Password Synchronization with Microsoft Dynamics CRM
  18. You will also need to set the following roles for your app based on your requirements:
    • If you need to synchronize passwords reset by all users including admins , ensure that the application is assigned the Global Administrator role.
      • To do this, navigate to Microsoft Entra ID > Manage > Roles and administrators, and select the Global Administrator role.
      • Password Synchronization with Microsoft Dynamics CRM
      • Click Add assignments. In the Select Member(s) field choose the ADSelfService Plus OAuth password sync application you created, and click Select.
      • Click Next.
      • Password Synchronization with Microsoft Dynamics CRM
      • Navigate to the Setting page, retain the default settings for all fields, fill in the Enter justification field, and click Assign.
      • Password Synchronization with Microsoft Dynamics CRM
    • If you only need to synchronize passwords reset by non-admin users, ensure that the application is assigned both the User Administrator and Password Administrator roles, following the same steps outlined above.

If you are using Password Authentication

Ensure that you have installed the Windows Azure AD Module for Windows PowerShell for your operating system, on your ADSelfService Plus server.

To install it, open an elevated PowerShell prompt and execute the following commands:

Configuration steps

  1. Log into ADSelfService Plus with admin credentials.
  2. Navigate to Configuration > Self-Service > Password Sync/Single Sign On.
  3. Select the Microsoft Dynamics CRM application.
  4. Note: You can also find Microsoft Dynamics CRM application that you need from the search bar located in the left pane or the alphabet wise navigation option in the right pane.

  5. Enter the Application Name and Description.
  6. Enter the Domain name of your Microsoft Dynamics CRM account.
  7. In the Assign Policies field, select the policies for which password sync need to be enabled.
  8. Note: ADSelfService Plus allows you to create OU and group-based policies for your AD domains. To create a policy, go to Configuration > Self-Service > Policy Configuration > Add New Policy.

  9. Under Password Sync, select Enable Password Sync.
  10. You can choose to enable password synchronization using either Password Authentication or OAuth Client Credentials.

    A. Password Authentication

    Password Synchronization with Microsoft Dynamics CRM

    If you choose Password Authentication, enter the Username and Password of your Microsoft Dynamics CRM administrator account.

    B. OAuth Client Credentials

    Password Synchronization with Microsoft Dynamics CRM

    If you choose OAuth Client Credentials, paste the Tenant ID, Client ID, and Client Secret of the Azure application, copied as instructed in the Prerequisites steps, in the respective fields.

  11. Click Add Application.

Thanks!

Your request has been submitted to the ADSelfService Plus technical support team. Our technical support people will assist you at the earliest.

 

Need technical assistance?

  • Enter your email ID
  • Talk to experts
  •  
     
  •  
  • By clicking 'Talk to experts' you agree to processing of personal data according to the Privacy Policy.

Don't see what you're looking for?

  •  

    Visit our community

    Post your questions in the forum.

     
  •  

    Request additional resources

    Send us your requirements.

     
  •  

    Need implementation assistance?

    Try onboarding

     

Copyright © 2024, ZOHO Corp. All Rights Reserved.