---
schema_version: "1"
id: eb701b2bbd72f0c0a4cecf90bb52d312f281c61328e4954b20dd47b9a714002b
title: Backup & Recover for Dynamics Server to Server Authentication
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/platform/264-0-0/br_o_microsoft_server_to_server.md
canonical_url: https://help.salesforce.com/s/articleView?id=platform.br_o_microsoft_server_to_server.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: c27e3ff5c01afd937e168ba2f3f23af41634a13a9a315b96052e9a445009e474
description: Server to Server Authentication (also known as Service Account or Application User) is the common way apps registered on Microsoft AppSource access the Dataverse data of their subscribers.
products:
  - Security
  - Salesforce Platform
release: "264"
---
# Backup & Recover for Dynamics Server to Server Authentication

Server to Server Authentication (also known as Service Account or Application User) is the common way apps registered on Microsoft AppSource access the Dataverse data of their subscribers.

Currently, we use an impersonation method. Server to server will be an additional method available when adding a new Dynamics service.

## Add a New Service with the App User

Prior to adding a new service in Backup & Recover, you will need to set up a new Application in your Azure portal, and a new Application User in the Dynamics environment you plan to back up using Backup & Recover.

To set up the new authentication method, you must:

- [Register a new Confidential Client Application with Microsoft Entra](https://learn.microsoft.com/en-us/power-apps/developer/data-platform/walkthrough-register-app-azure-active-directory#confidential-client-app-registration)
- [Create and configure a new Application User in the Microsoft Power Platform Environment](https://learn.microsoft.com/en-us/power-apps/developer/data-platform/walkthrough-register-app-azure-active-directory#create-a-new-app-user)
- In the Backup & Recover Application, add a new Application User.

1. Register a new Confidential Client Application in Microsoft Entra (Azure Active Directory). Permission to create a new app in Azure is required.
    1. Name the application appropriately for easy identification in Backup & Recover.
    2. Add a new certificate for the app and select maximum expiration period.
    3. Copy the secret code.
2. Create and configure a new Application User in the Microsoft Power Platform Environment.
    1. Navigate to the destination environment to back up with Backup & Recover.
    2. Add a new App User and connect to the newly created application.
    3. Assign a System Administrator Security Role to the Application User.
3. Add a new Service in the Own Recover Application.
    1. Add a New Service.
    2. Select the Provider - Dynamics 365.
    3. Select the Authentication Method - Application User.
    4. Paste the new application details from the Entra portal. The details required are:
        
        - Tenant ID and App ID from App Properties
        - Secret code - copied earlier
        - URL - from the Power Platform