Salesforce Docs Portal

Backup & Recover for Dynamics Server to Server Authentication

Server to Server Authentication (also known as Service Account or Application User) is the common way apps registered on Microsoft AppSource access the Dataverse data of their subscribers.

Currently, we use an impersonation method. Server to server will be an additional method available when adding a new Dynamics service.

Add a New Service with the App User

Prior to adding a new service in Backup & Recover, you will need to set up a new Application in your Azure portal, and a new Application User in the Dynamics environment you plan to back up using Backup & Recover.

To set up the new authentication method, you must:

  1. Register a new Confidential Client Application in Microsoft Entra (Azure Active Directory). Permission to create a new app in Azure is required.
    1. Name the application appropriately for easy identification in Backup & Recover.
    2. Add a new certificate for the app and select maximum expiration period.
    3. Copy the secret code.
  2. Create and configure a new Application User in the Microsoft Power Platform Environment.
    1. Navigate to the destination environment to back up with Backup & Recover.
    2. Add a new App User and connect to the newly created application.
    3. Assign a System Administrator Security Role to the Application User.
  3. Add a new Service in the Own Recover Application.
    1. Add a New Service.
    2. Select the Provider - Dynamics 365.
    3. Select the Authentication Method - Application User.
    4. Paste the new application details from the Entra portal. The details required are:
      • Tenant ID and App ID from App Properties
      • Secret code - copied earlier
      • URL - from the Power Platform