Microsoft is continually improving the security of its customers’ data. Organizations often empower employees to work with business data in Excel using the Microsoft Dynamics Office Add-In, commonly referred to as the Excel add-in. To further secure the connection between the Excel add-in and Dynamics 365 Business Central, Microsoft will roll out a change that requires administrators to update their Azure Active Directory (Azure AD) configuration to continue using the add-in.
When This Will Happen?
Microsoft will roll out changes to the Excel add-in starting July 1st, 2022.
For business continuity, administrators can prepare for the change at any time prior to this date.
How This Will Affect Your Organization?
This affects organizations that have configured the Excel add-in to work with Business Central on-premises or similar deployment variants, such as hosted or private cloud. Business Central online customers are not affected.
After Microsoft updates the Excel add-in, users will no longer be able to sign in to the add-in and the sign-in process will appear to halt without completion. This will occur when using the Edit in Excel feature in the Business Central clients, or for any new and existing Excel files that utilize the add-in. The inability to connect Excel to Business Central applies to all Excel clients and Excel versions supported by the add-in and applies to all versions of Business Central including the latest major update 20 and subsequent updates.
What You Need To Do To Prepare.
A simple, one-time configuration adjustment is required for organizations to continue using the add-in within that organization. The adjustment requires administrative permissions, can be done just once for the whole organization and can be completed in less than 5 minutes.
To configure the Azure AD registration associated with the add-in to use the new single-page application Redirect URI instead of the legacy Web Redirect URI, follow the instructions below
- Sign in to the Azure AD Portal.
- Select Azure Active Directory.
- Under Manage, select App Registrations, then find the app that was registered to enable users to sign in to the Excel add-in.
- Select Manifest, then find the URL entry for https://az689774.vo.msecnd.net/dynamicsofficeapp/v1.3.0.0/*
- Make sure the type property value is set to “Spa”, like the example below. If it is set to “web”, change it to “spa” and Save your changes.
Your experience may vary if your Azure AD App registration also includes Redirect URIs for other services. You should not change other Redirect URIs for other services or for the Business Central Web client as part of this change. To check if other services are affected by similar security hardening exercises and require re-configuration, please contact the service provider.
Additional Information.
Learn more about Registering your application with your Azure Active Directory tenant.
Learn more about Setting up the Excel add-in for Business Central on-premises.
Innovia Can Guide You Through This Change.
If you have any questions or need any assistance. Our 24/7 support squad is here to help. You can reach us by emailing a support ticket to support@innovia.com, by calling 855-856-8764, or by submitting a ticket through our website.