Which IIQ version are you inquiring about?
8.2p2 and above
As we know SailPoint don’t support direct creation of account in D365 FO
Thanks in Advance.
If the goal is to create a D365 account at minimal cost, it is possible, but the process is time-consuming and complex. In our case, it took almost a year and a half to fully implement due to resource constraints and a whole lot of R&D.
To establish a D365 account, the key requirement is syncing the Entra ID (formerly Azure AD) account with Dataverse. This is done by running a PowerShell command that ensures the user exists in Dataverse and is recognized within D365. The command used for this is:
Add-AdminPowerAppsSyncUser
Instead of manually executing this for every user, we automated the process by triggering the command via an Azure Function within the before provisioning rule of a web services connector operation. This function not only executed the PowerShell command but also returned the native identity or the Dynamics system user ID that is generated. The connector allowed us to interact with D365 APIs and aggregate the account back in after provisioning.
The main prerequisite for this approach is an existing Entra ID/Azure AD account for the user. The web services connector is free to use, making this an effective and low-cost method. While the setup takes time, this automation reduces manual effort and streamlines the D365 account provisioning process.
2 Likes