Microsoft Dynamics 365
Microsoft Dynamics 365 is a cloud-based business applications platform that combines CRM and ERP capabilities. Integrate with Dynamics 365 to sync sales, customer, and operational data with Suger.
Overview
Org-Level vs User-Level
There are two separate configurations, and they authenticate in different ways:
| Org-Level | User-Level | |
|---|---|---|
| Auth flow | Azure AD client credentials (app-only) | OAuth 2.0 authorization code (delegated) |
| Acts as | The application user you create in Dynamics 365 — not a person | The signed-in person |
| Sees | Whatever the application user’s security roles allow, across the organization | Only the Dynamics 365 data that person can already see |
| Best for | Backend integrations, scheduled syncs, and automated workflows | Individual users working with their own records |
Both configurations require you to supply two values before the connection can start:
- Tenant ID — your Azure AD (Microsoft Entra ID) directory ID.
- Instance URL — your Dynamics 365 environment, e.g.
https://{your-org}.crm.dynamics.com.
These cannot be discovered automatically, so the connect flow shows a short pre-start form asking for them before it hands you off to Microsoft. They are used to build the correct authority and API endpoints for your environment, and are validated against the same schema on both levels.

Create Integration (Org-Level)
Org-level integration uses Azure AD client credentials for application-level access. This is suitable for backend integrations that need to access data across the organization.
Prerequisites
- Dynamics 365 instance URL (e.g.,
https://yourorg.crm.dynamics.com) - Tenant ID from Azure AD
- Application User in Dynamics 365: Create an application user in Dynamics 365 linked to your Azure AD app registration. This application user will be used by Suger to access Dynamics 365 data via the Web API.
Create Application User in Dynamics 365
- In Dynamics 365, go to Settings > Security > Users
- Change the view to Application Users
- Click New and fill in the details:
- User Name: Enter a name (e.g.,
Suger Integration) - Application ID: Enter
1a00a839-496c-488d-a97a-4cdb171b747f - Display Name: Enter a display name (e.g.,
Suger Integration) - Email: Enter an email address (can be any valid email)
- User Name: Enter a name (e.g.,
- Click Save
- After saving, assign the appropriate security roles to the application user
Grant Security Roles via Power Platform Admin Center
- Visit Power Platform Admin Center
- Select the environment you are connecting — its URL looks like
https://{your-org}.crm.dynamics.com - Navigate to Settings → Users + permissions → Application users
- Click + New app user
- Add an app: select the Application (client) ID created during Azure integration setup
- Business unit: select the default one (named after your environment,
{your-org}.crm.dynamics.com) - Security roles: grant System Administrator
Authenticate
- Navigate to Settings > Integrations
- Click Connect Dynamics 365
- Enter your Tenant ID and Instance URL
- Click Verify to test the connection
- Once verified, click Connect
Create User Integration
User-level integration uses OAuth2.0 authorization code flow. Each user authenticates via Microsoft OAuth to access their own Dynamics 365 data.
Prerequisites
- Azure AD Tenant ID (provided before OAuth authorization)
- Dynamics 365 Instance URL (provided before OAuth authorization)
Before OAuth Authorization
Before initiating the OAuth flow, you must provide your Azure AD tenant ID and your Dynamics 365 instance URL on the pre-start form. Both are required to construct the correct OAuth authority, scopes, and API endpoints for your environment.
Authenticate
- Click
Connect Nowbutton in the User Integrations section - Enter your Tenant ID and Dynamics 365 Instance URL when prompted
- You will be redirected to Microsoft for authentication
- Sign in with your Microsoft credentials
- Click Accept to grant Suger permission to access your Dynamics 365 data
- After authorization, you will be redirected back to Suger
- Verify the integration by clicking the Verify button
Edit Integration
For security purposes, editing an existing Microsoft Dynamics 365 integration is not allowed. The practical way is to delete it and then recreate it from the beginning.
Delete Integration
The Microsoft Dynamics 365 integration can be deleted like all other integrations. Once the deletion is triggered, all integration info including the credentials and access tokens will be deleted immediately and permanently from Suger.
Supported Operations
| Operation | Org-Level | User-Level |
|---|---|---|
| Read Data | ✓ | ✓ |
| Write Data | ✓ | ✓ |
| Sync Data | ✓ (opportunities) | - |
| Webhooks | - | - |
Opportunity Sync
Suger syncs opportunities from your Dynamics 365 environment. This runs on the org-level connection — it uses the application user’s credentials, so it is not tied to any one person staying connected, and its visibility is exactly what you granted that application user’s security roles.
Opportunity sync is what lets Suger:
- Read the opportunities in your environment so they can be turned into co-sell referrals.
- Open a specific opportunity from Suger when someone starts a co-sell from a Dynamics 365 record.
- Select opportunities automatically against conditions you configure, rather than one at a time.
Note: Webhooks are not supported at this time. Dynamics 365 data reaches Suger through the opportunity sync described above rather than by Dynamics 365 pushing change notifications to Suger.
Spotted something wrong or out of date on this page? Tell us and we'll correct it.