Configure the Warehousing app for on-premises deployments
This topic describes how to configure Dynamics 365 for Finance and Operations – Warehousing app for on-premises deployments.
The Warehousing app is available on Android and Windows operating systems. To use the app for on-premises deployments, at a minimum, it must be version 220.127.116.11. You must also have one of the following supported versions of Dynamics 365 Finance + Operations (on-premises). Use the information in the following table to evaluate if your hardware and software environment supports the configuration.
|Android||4.4 and up|
|Windows (UWP)||Windows 10 (all versions)|
|App version||18.104.22.168 and above|
|Dynamics 365||Dynamics 365 Finance + Operations (on-premises) with Platform update 11|
To be able to reach your on-premises resources with the app, you will need to create DNS records for your AOS and for Active Directory Federation Services (AD FS). For guidance, see Create DNS zones, and add a record.
Create an application entry in AD FS
For a successful authentication exchange between AD FS and Finance + Operations, an application entry must be registered in AD FS under an AD FS application group. To create this application entry, run the following Windows PowerShell commands on a machine where the AD FS is installed. The user account must have enough permissions to administer AD FS.
Enter the following command in the Windows PowerShell console to create the application entry.
Add-AdfsClient -Name 'Dynamics 365 for Finance and Operations - Warehousing' -ClientId ([guid]::NewGuid()) -ClientType Confidential -GenerateClientSecret -RedirectUri '\<Resource URL\>' -ADUserPrincipalName '\<Admin user\>'
- The <Resource URL> can, for example, be
https://ax.d365ffo.onprem.contoso.comis the URL to access Finance + Operations).
- The <Admin user> can be any user with admin access to the AD FS machine.
- The <Resource URL> can, for example, be
Save the values that you received.
Run the following command to grant permission to the application.
Grant-AdfsApplicationPermission -ClientRoleIdentifier '\<Client ID received in previous steps\>' -ServerRoleIdentifier '\<Resource URL\>' -ScopeNames 'openid'
Create and configure a user account
To enable Finance + Operations to use your AD FS application, you must create a user account in Microsoft Dynamics 365 with the same user credentials as the user of the Warehousing app:
Create a user in Finance + Operations and assign the Warehousing mobile device user role to the user.
a. Go to System administration > Common > Users.
b. Create a new user.
c. Assign the warehouse mobile device user role, as shown in the example screenshot.
Associate your AD FS application with the Warehousing app user.
a. In Finance + Operations, click System administration > Setup > Azure Active Directory applications.
b. Create a new line.
c. Enter the client ID that you obtained when you created an application entry in AD FS (step 2 in "Create an application entry in AD FS"). Enter a name, and select the Warehousing app user.
Make sure that the devices with the app installed have the correct certificates to access the resources. If you are using self-signed certificates, these will need to be installed on each device by importing star(AX) and AD FS to the trusted route of the computer account/user account. For more information, see Create and export a self-signed certificate.
Environments with self-signed certificates will not be accessible from Android devices. If you need to access the environment from an Android device, use publicly trusted certificates for AD FS and Finance + Operations. Alternatively, you can also use AD CS to generate the certificates for AD FS and Finance + Operations. However, if you do this you will have to manually import the certificate authority certificate into your Android device.
Configure the application
You must configure the Warehousing app on the device to connect to the server through the AD FS application.
In the app, open Connection settings.
Enter the following information:
a. Active Directory Client ID - The client ID that you obtained when you created an application entry in AD FS (step 2 in "Create an application entry in AD FS").
b. Active Directory Client Secret - The client secret obtained when you created an application entry in AD FS.
c. Active Directory Resource - The DNS URL for the AOS. Append the URL with '/namespaces/AXSF'. For example:
d. Active Directory Tenant - The DNS URL for the AD FS machine. Append the URL with '/adfs/oauth2'. For example:
https://adfs.d365ffo.onprem.contoso.com/adfs/oauth2Make sure to use the CNAME of the ADFS machine (in the example the CNAME is
Company - Enter the legal entity to which you want the application to connect.
Select the Back button in the top-left corner of the application.
The application will now connect to your server and the log-in screen for the warehouse worker will display.
If you do not have a telemetry ID for the Warehouse app, you might encounter some errors. This is a known issue. The workaround is to sign in to an existing client to get a Telemetry ID. This issue will be fixed in a future release.