How to: Configure the Microsoft Dynamics NAV Windows Client for ACS
You configure the Microsoft Dynamics NAV Windows client for Access Control Service (ACS) by editing the client configuration file, ClientUserSettings.config.
Before you begin this procedure, you must perform the steps to configure your deployment for ACS. For more information, see Use ACS to Authenticate Users.
To configure the Microsoft Dynamics NAV Windows client for ACS
Edit the client configuration file, ClientUserSettings.config, for each copy of the Microsoft Dynamics NAV Windows client that will be supporting users for ACS authentication.
A separate instance of the ClientUserSettings.config file is maintained for each client user. The default location for this file is C:\Users\<username>\AppData\Roaming\Microsoft\Microsoft Dynamics NAV\70, where <username> is the name of the user. By default, this folder and file are hidden. Change your folder options in Windows Explorer to view hidden files before you modify the ClientUserSettings.config file.
Warning
To make sure that your edits to ClientUserSettings.config are saved, first open Notepad as an Administrator and then, in Notepad, open the settings file. To open Notepad as an Administrator, from the Start menu, right-click Notepad, and then choose Run as Administrator.
In ClientUserSettings.config, modify the following settings.
Setting Value Server
Use the fully qualified domain name of the computer that is running Microsoft Dynamics NAV Server.
ServerInstance
"DynamicsNAV"
ClientServicesCredentialType
"AccessControlService"
DnsIdentity
Use DnsIdentity setting if the DNS name on the certificate that is used on the server does not match the value of the Server setting. The primary task of service certificates is to authenticate the server to clients. One of the initial checks when a client authenticates a server is to compare the value of the Subject field to the Uniform Resource Identifier (URI) that is used to contact the service. The DNS names of both must match. For example, if the URI of the service is "ntp.tcp://www.DynamicsNAV.com/ServerInstance/", then the Subject field must also contain the value "www.DynamicsNAV.com".
The value of the Subject field typically contains the "CN =" prefix. CN means common name. For example, "CN = www.DynamicsNAV.com." You must remove the "CN =" prefix when you use the DnsIdentity setting.
ACSUri
Use the URI for your relying party application from the Application Integration section of the Access Control configuration. For more information, see Configure Your Deployment for ACS.
After updating the values, save ClientUserSettings.config.