How Do you "Use" an App Registration

Question

Hello all,

I am struggling to understand how someone would or should use an App Registration. My scenario:

I have an app registration in my Azure Portal, configured as a web application. I have a Power Platform application user setup with this app registration as the application. I have a (currently unrelated) web service written in Java/JSF.

In what ways would I get this web service to "talk" to the app registration? Or, if this is the wrong way to do things, how would I edit the app registration to emulate the behavior of a web service, I.E. do XYZ thing when a URL is called?

As I understand it, the app registration is just meant to allow authentication and access to Azure data/services, and what I'm trying to get my web service to connect to is a particular Dataverse table. Please also tell me if these preconceptions are incorrect, I am not experienced with Azure/Dynamics 365/Dataverse/Power Apps/ETC.

Thanks!
Jared Leonard

Answer 1

Hi @Leonard, Jared ,
Thanks for reaching out.

From your query I can understand that you are looking to call Dataverse (Power platform application) from your Web Service.

Applications which need to authenticate against Azure Active Directory need to register through Azure Portal or PowerShell and application integrate with the Microsoft identity platform follow an authorization model OAuth 2.0 that gives users and administrators control over how data can be accessed.

To allow authenticated users to perform operations to dataverse, application need to configure with appropriate permissions to access the web-hosted resources on behalf of user.

1.First Web Service (Java/JSF) need to register in Azure AD Tenant. You must use an account same Microsoft 365 subscription (tenant) with which you access Dynamics 365/Dataverse.

Navigate to Azure Portal ->Application Registration ->Add

2.Select Manifest tab, in the manifest editor, set the allowPublicClient* property to true and click on Save.

3.Now configured permission under API permissions tab. Choose Dataverse under the APIs my organization uses tab.

4.Select User_Personation under delegated permissions and add permission to the application.

Now you can configure your web application with application id, tenant id and redirect URI to acquire the token and call the dataverse service using the acquired access token by passing in authorization header.

Refrence doc: https://learn.microsoft.com/en-us/powerapps/developer/data-platform/authenticate-oauth

Hope this will help with your query.

Thanks,
Shweta

---

Please remember to "Accept Answer" if answer helped you.

Answer 2

Hi @Shweta Mathur , thanks for your reply! That gives me a lot of threads to pull at, but I had a couple of additional questions:

• If the application is a Web application, and I make a Web app registration, would I still need to provide a redirect URI?
• Would you recommend a certain OAuth2 client for Java/JSF, or just constructing OAuth2 requests manually with HTTP requests?

These extend beyond the scope of the original question though, thank you for you answer