With Config AD installed on the domain controller, we now need to configure it to connect to the required Microsoft Dynamics GP installation. To do this open the Active Directory Users and Groups, right click on a user and then click on Configure Dynamics User:
Once you have the Config AD installer extract the files and run the setup.exe on your Domain Controller server. Depending on your security setup you may see the following warning to which you should click Run:
The prerequisites for Config AD are fairly simple:
- Windows Active Directory
- Microsoft Dynamics GP configured with companies and security roles
- If Dynamics GP has already been implemented the Advanced SQL Server options on all users in Dynamics GP needs to be disabled
When I was configuring Config AD the last of the prerequisites caught me out as it was mentioned only in the Troubleshooting section of the documentation. It would have been helpful if this had been mentioned in the instructions or a prerequisites section. It was fairly easy to resolve once I knew what the problem was (I’ll cover this in a later post).
The single sign-on is done by integrating Microsoft Dynamics GP with Active Directory. This can allow for all user provisioning to be done by the IT Helpdesk without requiring them to log into Dynamics GP itself which IT teams are not usually familiar with. Config AD installs onto the Domain Controller and provides a right click interface in the Users and Groups applet.
As it is unlikely that all maintenance will be done on the Domain Controller, Config AD also has a Config AD Desktop which can be installed on any client and allow users to be created and maintained.
Both the Users and Groups applet and Config AD allow a Microsoft Dynamics user can be created in seconds without the need to use the sa account within Dynamics GP or even to give the security and access roles in SQL Server to a user.
If you are using the web client Microsoft Dynamics GP 2013 R2 saw the introduction of Identity Management – Login which will provide single sign-on functionality. However, for those using the desktop client the best that Dynamics GP has to offer is the Remember User and Password introduced in Dynamics GP 2010.
However, Dynamics GP has a thriving community surrounding it which includes many ISVs (Independent Software Vendors), one of which is called Fastpath; this company has developed an add-on for Dynamics GP called Config AD which makes single sign-on with Dynamics GP.
Typically my posts have all been around the Dynamics GP core product or the add-ons from Microsoft with only a small number of posts on products from other vendors. In this series of posts I am stepping outside of this area as I am going to cover the install, configuration and use of Fastpath’s Config AD. The index for this series is below and will expand as posts are made.