Enabling Access Control Services to connect to Multi Factor Authentication

Last month we introduced you to our new blog series – designed to keep you updated on all manner of complex technical issues. In this next blog post from our technical support team, we’re learning all about how to enable access control services to connect to multi factor authentication.

By default, users are authenticated using their Windows domain credentials, for example, DOMAIN\USERNAME – Wouldn’t it be nice if we could secure access to our data through Microsoft 365 and link this to Multi Factor Authentication?

Fortunately, this ability exists on any version of Microsoft Dynamics Nav/Business Central 2013 and upwards.

On the Service Tier(s) for your environment, there is a configuration option for authentication called Credential Type, which dictates the authentication method used between the end user/client and the SQL database.

This needs to be set to AccessControlService so that when authenticating, Microsoft 365 is used.

There are a few more steps that you will need to follow:

• SSL Certificate – To secure the service, a Certificate Thumbprint is required from an SSL certificate, installed on the Service Tier.

• Azure App Registration – To link the service to the correct Azure Active Directory, an App Registration is required. Variables from the app are held against the service tier, more details can be found here – User Authentication with Azure AD for Single Sign-on – Business Central | Microsoft Docs

• An Exposed Port and DNS rule– As the service tier will need to speak to Azure to confirm the user identify, a secure DNS rule and exposed port are needed for HTTPS traffic.

Once these steps have been taken, your end users will be able to authenticate using their Microsoft 365 account, adding an additional layer of security to your environment.

Facilitate efficient document sharing with stakeholders in the construction team with integrated document management – download the brochure here!