从OAuth到Microsoft Dynamics Marketing OData提要

Question

I'm trying to connect to Microsoft Dynamics Marketing OData Data Service. This page lists the OData feeds for ready-only access, but does not have any information about how to authenticate against it.

I have been trying to acquire an Access Token using Microsoft.IdentityModel.Clients.ActiveDirectory -Version 1.0.4 like this:

var authenticationContext = new AuthenticationContext("https://login.windows.net/" + domainName);
var authenticationResult = authenticationContext.AcquireToken(resource, clientId, redirectUri);
var token = authenticationResult.AccessToken;

The domainName is like contoso.onmicrosoft.com but I do not know what to use for the clientId , redirectUri , resource .

I have tried many different combinations and have had errors such as:

invalid_request: AADSTS90027: The client 'xxxxxxxx-9068-486b-bdd2-dac26b8a5a7a' and resource 'Microsoft.DynamicsMarketing' identify the same application.

and

access_denied: AADSTS65005: The client application has requested access to resource 'Microsoft.DynamicsMarketing'. This request has failed because the client has not specified this resource in its requiredResourceAccess list.

I think I am close with this. I have registered an application in Azure AD as a Native Client App and used its clientId and redirectUri with Microsoft.DynamicsMarketing as the resource. I found this from the Service Principal listing, Get-MsolServicePrincipal using the "Windows Azure Active Directory Module for Windows PowerShell".

Are these the correct parameters and I just need to sort out permission some how or am I way off?

Update The correct resource is https://marketing-infra.dynamics.com/ which is one of the service principal names listed as is the previous one I used Microsoft.DynamicsMarketing . This works with the clientId and redirectUri that I captured from Fiddler from Power Query. I am pretty certain that to get it working with my clientId I need to give Dynamics Marketing permissions in the Azure Application Registration, "permissions to other applications". The problem is Dynamics Marketing is not an application that is available to add and the Dynamics CRM delegate permissions does not have a role for Dynamics Marketing.

Answer 1

It indeed is possible to access the feeds. But you have to register an application in Azure Active Directory and authorize that to access Dynamics Marketing.

Please look at my BlogPost on this topic here - includes steps and sample code :-)

I have also published PowerShell cmdlets on GitHub that do this is a more generic way and do not use a proxy class for the data model. PowerShell cmdlets to access to MDM across OData and SDK

Answer 2

I got the answer from Microsoft that clients other then Power Query are not supported. So the code I have above is correct and there is not yet support for adding permission to access it with other applications.